Re: Re: [Security] ZIP file attachments temporarily blocked on CalMail

I'd have to disagree with the statement "...very little legitimate reason
to send .zip attachments." I get legitimate zip files that can directly
effect my daily work. Flat out dropping with no notification seems
irresponsible. The sender will assume I've received the file, if it is just
dropped, I will have no way of knowing that it was sent. Notification
should be a minimum requirement.

Monica

At 03:26 PM 3/2/2004, John Ives wrote:
>Wouldn't it be safer to just drop the attachments with a message (like
>the current deleted because of virus message), that way if something
>legitimate is sent, the recipient at least knows what happened and why.
>
>John
>
>
>On Tue, 2 Mar 2004, Aron Roberts wrote:
>
> > Messages containing ZIP file attachments will soon be blocked on
> > the CalMail email system, at least temporarily.
> >
> > From what I understand, messages with virus-containing attachments
> > purporting to come from "The Berkeley.edu Team" and support@socrates,
> > and using various techniques of social engineering -- such as telling
> > users that important instructions are included in these attachments,
> > or warning users that their accounts will be deactivated unless they
> > open these attachments -- have started appearing.
> >
> > This situation is being investigated, and as an interim protective
> > measure, messages containing ZIP files will temporarily be blocked.
> >
> > Aron Roberts
> > Workstation Software Support Group
> > (for the CalMail team)
> > -------------------------------------
> > Sent via the ucb-security mailing list.
> >
>
>------------------------------------------------------------------------
>The following was automatically added to this message by the list server:
>
>For information about Micronet, including subscribing to
>or unsubscribing from its mailing list and finding out
>about upcoming meetings, please visit the Micronet Web site:
><http://micronet.berkeley.edu/>.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Wed Mar 3 08:37:45 2004