emails with .zip files RSS

1

Hi all
We are having upwards of 50 emails a day with .zip attachments, these attachments are around 12k in size and are malicious. subjects vary from:

you received a new debit
fwd case...
important attached form
etc

We cannot block .zip files from within ORF as we do have genuine customers that do email artwork as .zip

Is there anything I can do to email that have .zip files that are say 20k or below in size?

any help would be much appreciated.

regards
Sean

by sean.sylvester 5 years ago
2

@sean.sylvester: Since ORF focuses on spam, its attachment filtering capabilities are limited, such complex rules are not supported (which examines the file size and attachment type at the same time).

These should be caught/handled by the email filtering feature of your resident anti-virus software. You may also give the ClamAV External Agent a try to drop infected emails (http://vamsoft.com/r?clamav-article), but having an anti-virus software installed which monitors the inbound/outbound email flow is a must.

by Krisztián Fekete (Vamsoft) 5 years ago
(in reply to this post)

3

We replace all ZIP attachments using ORF and we just make sure approved senders of ZIP files via email are in the Sender Whitelist. Just be sure that Attachment Filtering is not selected in Test-Tests-Configure.

by paul.appleby 5 years ago

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Nickname:
Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed