Stripping BlackWorm attachments

[bubbajoex]

Hi,

I am running NG AI R55 HFA14 and I am also running smartdefense. Is there a way to strip attachments with certain extensions (i.e. *.B64, *.BHX, *.HQX, *.UU) from incoming smtp traffic?

I see that in FW1 4.1 you can do by creating a SMTP resource and editing the object C file to strip files with specific extensions.



Thanks,

-B

[Sergej]

You can create the rule with SMTP resource. Under SMTP check Action2 tab. You can use "Strip file by name"

Strip file by name strips file attachments of the specified name from the message. This field enables the user to strip UU-ENCODE and MIME file attachments whose names match any of the defined expressions. Consider the three expressions: {+love*, *.pic, a*.+}. In the following examples, the defined file attachments will be stripped