Attachment Validation and Protection

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Attachment Validation and Protection

Martin Voßloh-2

Hello,

 

I have a working setup with Attachment Blocking Setup and ASSP_AFC plugin.

Now I would only block incoming mail with defined attachments, but no outgoing mail traffic.

Under Attachment Validation and Protection, I found "Whitelisted & Local Attachment Blocking (BlockWLExes)" but I just want to allow only local attachments. Can I define somewhere that local attachments are allowed, but which on whitelist are not? Is it possible to share this feature?

 

Any idea?

 

Best regards

Martin

 


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Attachment Validation and Protection

Martin Voßloh-2

Hello Again,

 

has anybody a Idea how to share these groups "Whitelisted & Local Attachment Blocking (BlockWLExes)" or how to only allow internal mails going out without attachment blocking.

 

Kind Regards,

Martin

 

Von: Martin Voßloh [mailto:[hidden email]]
Gesendet: Dienstag, 28. Februar 2017 12:23
An: ASSP development mailing list <[hidden email]>
Betreff: [Assp-test] Attachment Validation and Protection

 

Hello,

 

I have a working setup with Attachment Blocking Setup and ASSP_AFC plugin.

Now I would only block incoming mail with defined attachments, but no outgoing mail traffic.

Under Attachment Validation and Protection, I found "Whitelisted & Local Attachment Blocking (BlockWLExes)" but I just want to allow only local attachments. Can I define somewhere that local attachments are allowed, but which on whitelist are not? Is it possible to share this feature?

 

Any idea?

 

Best regards

Martin

 


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Attachment Validation and Protection

Thomas Eckardt/eck
Use 'UserAttach'. Notice, that those configurations ignores both flags - 'whitelisted' and 'noprocessing', because they are too weak for a secured attachment protection.

Thomas






Von:        Martin Voßloh <[hidden email]>
An:        ASSP development mailing list <[hidden email]>
Datum:        03.03.2017 08:13
Betreff:        Re: [Assp-test] Attachment Validation and Protection




Hello Again,
 
has anybody a Idea how to share these groups "Whitelisted & Local Attachment Blocking (BlockWLExes)" or how to only allow internal mails going out without attachment blocking.
 
Kind Regards,
Martin
 
Von: Martin Voßloh [mailto:Martin.Vossloh@...]
Gesendet:
Dienstag, 28. Februar 2017 12:23
An:
ASSP development mailing list <[hidden email]>
Betreff:
[Assp-test] Attachment Validation and Protection

 
Hello,
 
I have a working setup with Attachment Blocking Setup and ASSP_AFC plugin.
Now I would only block incoming mail with defined attachments, but no outgoing mail traffic.
Under Attachment Validation and Protection, I found "Whitelisted & Local Attachment Blocking (BlockWLExes)" but I just want to allow only local attachments. Can I define somewhere that local attachments are allowed, but which on whitelist are not? Is it possible to share this feature?
 
Any idea?
 
Best regards
Martin
 ------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: Attachment Validation and Protection

Martin Voßloh-2

Hi Thomas,

 

I have already set somthing like this in userAttach for ASSP_AFC-Plugin and only for zip files:

 

zip:*@owndomain.org=>block-in=>ad[ep]|asx|ba[st]|chm|cmd|com|cpl|crt|dbx|exe|exe\-bin|hlp|ht[ab]|in[fs]|isp|js|jse|lnk|md[abez]|mht|ms[cipt]|nch|pcd|pif|prf|ps1?|reg|sc[frt]|sh[bs]|vb|vb[es]|wms|ws[cfh]|ace

 

But outgoing Mails are also blocked like .bat, .exe or what else. this time.

 

That means, if I use the „userAttach“ function all the „BadAttachLX“ and other entrys are obsolete an I must define everything in the „UserAttach“ file?

I only want outgoing mails without any attachemnt blocking. So I must define something like this for all outgoing mails?

 

[hidden email]

 

Regards,

Martin

 

Von: Thomas Eckardt [mailto:[hidden email]]
Gesendet: Freitag, 3. März 2017 08:24
An: ASSP development mailing list <[hidden email]>
Betreff: Re: [Assp-test] Attachment Validation and Protection

 

Use 'UserAttach'. Notice, that those configurations ignores both flags - 'whitelisted' and 'noprocessing', because they are too weak for a secured attachment protection.

Thomas






Von:        Martin Voßloh <[hidden email]>
An:        ASSP development mailing list <[hidden email]>
Datum:        03.03.2017 08:13
Betreff:        Re: [Assp-test] Attachment Validation and Protection





Hello Again,
 
has anybody a Idea how to share these groups "Whitelisted & Local Attachment Blocking (BlockWLExes)" or how to only allow internal mails going out without attachment blocking.
 
Kind Regards,
Martin
 
Von: Martin Voßloh [[hidden email]]
Gesendet:
Dienstag, 28. Februar 2017 12:23
An:
ASSP development mailing list <[hidden email]>
Betreff:
[Assp-test] Attachment Validation and Protection

 
Hello,
 
I have a working setup with Attachment Blocking Setup and ASSP_AFC plugin.
Now I would only block incoming mail with defined attachments, but no outgoing mail traffic.
Under Attachment Validation and Protection, I found "Whitelisted & Local Attachment Blocking (BlockWLExes)" but I just want to allow only local attachments. Can I define somewhere that local attachments are allowed, but which on whitelist are not? Is it possible to share this feature?
 
Any idea?
 
Best regards
Martin
 ------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test