Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 0 subscribers
  • Views 10643 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to Block Flash embedded Excel attachments ?

Pubudu

Hi All, First of all let me wish all of you a Happy and prosperous “2010”.

I have implemented PureMessage for Unix 5.5.9 as the email gateway. I’’’’m very happy with PMX performance but have a issue for which I need advice.

I am filtering unwanted attachments using “pmx_attachment_true_filetype” scanning and I’’’’m blocking attachments as per the MIME types. However this technique fails to detect Flash embedded Microsoft excel attachments. I Want to block users sending excel files with flash embedded games and videos but don’’’’t want to block normal excel content.

Greatly appreciated if someone can advice me on how to achieve my requirement…

Thanks in advance,

Pubudu.

:631


This thread was automatically locked due to age.
Parents
  • 0

    Hey Pubudu,

    At this time, it doesn't look like the engine can decipher the difference between the two Excel spreadsheet as you have seen.

    You can submit the sample to Sophos Technical Support or through the following link:

    https://secure.sophos.com/support/samples/

    Please identify in the comments your description of the type of file and that you would like to see the Flash component detected.

    Alternatively, if you engage the support team, they can submit it to the labs to see if a TFT identity for this type of sample is possible.

    Cheers,

    :643
Reply
  • 0

    Hey Pubudu,

    At this time, it doesn't look like the engine can decipher the difference between the two Excel spreadsheet as you have seen.

    You can submit the sample to Sophos Technical Support or through the following link:

    https://secure.sophos.com/support/samples/

    Please identify in the comments your description of the type of file and that you would like to see the Flash component detected.

    Alternatively, if you engage the support team, they can submit it to the labs to see if a TFT identity for this type of sample is possible.

    Cheers,

    :643
Children
No Data
Unfiltered HTML