Re: Re: [Security] ZIP file attachments temporarily blocked on CalMail

From: by way of Micronet mailing list administrator <JakeF_at_Info-Sec.Berkeley.EDU>
Date: Wed Mar 03 2004 - 12:34:36 PST

I wonder if it would it be possible to drop only passwd proceed zip files
and zips with viruses within.

jake-F

At 08:35 AM 3/3/2004 -0800, Monica Mack wrote:
>I'd have to disagree with the statement "...very little legitimate reason
>to send .zip attachments." I get legitimate zip files that can directly
>effect my daily work. Flat out dropping with no notification seems
>irresponsible. The sender will assume I've received the file, if it is
>just dropped, I will have no way of knowing that it was sent. Notification
>should be a minimum requirement.
>
>Monica
>
>At 03:26 PM 3/2/2004, John Ives wrote:
>>Wouldn't it be safer to just drop the attachments with a message (like
>>the current deleted because of virus message), that way if something
>>legitimate is sent, the recipient at least knows what happened and why.
>>
>>John
>>
>>
>>On Tue, 2 Mar 2004, Aron Roberts wrote:
>>
>> > Messages containing ZIP file attachments will soon be blocked on
>> > the CalMail email system, at least temporarily.
>> >
>> > From what I understand, messages with virus-containing attachments
>> > purporting to come from "The Berkeley.edu Team" and support@socrates,
>> > and using various techniques of social engineering -- such as telling
>> > users that important instructions are included in these attachments,
>> > or warning users that their accounts will be deactivated unless they
>> > open these attachments -- have started appearing.
>> >
>> > This situation is being investigated, and as an interim protective
>> > measure, messages containing ZIP files will temporarily be blocked.
>> >
>> > Aron Roberts
>> > Workstation Software Support Group
>> > (for the CalMail team)
>> > -------------------------------------
>> > Sent via the ucb-security mailing list.
>> >
>>
>>------------------------------------------------------------------------
>>The following was automatically added to this message by the list server:
>>
>>For information about Micronet, including subscribing to
>>or unsubscribing from its mailing list and finding out
>>about upcoming meetings, please visit the Micronet Web site:
>><http://micronet.berkeley.edu/>.
>
>-------------------------------------
>Sent via the ucb-security mailing list.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Wed Mar 3 12:35:31 2004

This archive was generated by hypermail 2.1.8 : Wed Mar 03 2004 - 12:35:31 PST