subject: (Fwd) Re: Blocking attachments- RE: Virus blocking *.pif
posted: Wed, 07 Apr 2004 09:55:31 +0100


...some extensions to filter upon!

------- Forwarded message follows -------
Send reply to: "steve" <[email protected]>
From: "steve" <[email protected]>
To: "Tom Burns" <[email protected]>, <[email protected]>,
<[email protected]>
Subject: Re: Blocking attachments- RE: Virus blocking *.pif
Date sent: Tue, 6 Apr 2004 13:45:00 -0400

[ Double-click this line for list subscription options ]

I agree with the other postings/replies about blocking PIF. No reason to
let them through. Nice list provided by Tom Burns.

Here is what we block and what the extensions mean:
ADE Microsoft Access Project Extension
ADP Microsoft Access Project
BAS Visual Basic Class Module
BAT Batch Files
CHM Compiled HTML Help File
CMD Windows NT Command Script
COM MS-DOS Application
CPL Control Panel Extension
CRT Security Certificate
EML Email Attachment Format
EXE Application
HTA HTML Program
INF Setup Information
INS Internet Naming Service
ISP Internet Communication Settings
JS JScript
JSE JScript Encoded
LNK Shortcut to Windows links
MSI Windows Installer Package
MSP Windows Installer Patch
PIF Shortcut to MS-DOS Program
REG Registration Entries
SCR Screen Saver
SCT Windows Script Component
SHS Scrap File Script
VB VBScript File
VBE VBScript Encoded Script File
VBS VBScript Script File
WSC Windows Script Component
WSF Windows Script File
WSH Windows Scripting Host Settings File

We block only password protected ZIP files, not all ZIP files.


----- Original Message -----
From: "Tom Burns" <[email protected]>
To: <[email protected]>
Sent: Monday, April 05, 2004 2:10 PM
Subject: Blocking attachments- RE: Virus blocking *.pif


I've found that this list of attachment blocking works very well for
preventing incoming viruses-

.exe,.mso,.pif,??_,001,002,386,3GR,acm,ADT,APP,ARC,ARJ,ASD,ASP,AX?,BAT,B
IN,BO?,CAB,CBT,CDR,CHM,CLA,CMD,CNV,COM,CPL,CPT,CSC,D?B,DEV,DIF,DL?,DRV,E
XE,FO?,GMS,GZ?,HLP,HT?,ICE,IM?,INF,INI,JS?,LIB,LZH,MB?,MD?,MOD,MPD,MPT,M
RC,MS?,MSG,MSO,OBD,OBJ,OBT,OCX,OLB,OLE,OTM,PCI,PDB,PDR,PIF,POT,PRC,PV?,Q
LB,QPW,RAR,REG,SCR,SHB,SHS,SIS,SMM,SYS,TAR,TD0,TGZ,TLB,TSP,VBE,VBS,VBX,V
S?,VWP,VXD,WBK,WIZ,WPC,WPD,WS?,XLB,XML,XSL,XTP

.ZIP files are blocked anytime I feel the need to do so based on virus
warnings, rumours of zip viruses, etc- I can always get them out of
quarteene.



-----Original Message-----
From: David S. Wu [mailto:[email protected]]
Sent: Monday, April 05, 2004 1:43 PM
To: [email protected]
Subject: Virus blocking *.pif

Does anyone know if there's a legitimate reason to allow .pif
attachments?
.pif is "program information file" in earlier version of Windows.

If there's not a legitimate reason, I would like to configure our
content
scanning software to block it outright and not even notify our users.

Thanks in advance.



------------------------------------------------------------------------
------
------------------------------------------------------------------------
----





----------------------------------------------------------------------------
--
----------------------------------------------------------------------------



------------------------------------------------------------------------------
----------------------------------------------------------------------------

------- End of forwarded message -------

---
* Origin: [adminz] tech, security, support (192.168.0.2)

generated by msg2page 0.06 on Jul 21, 2006 at 19:04:17