Blocking attachments instead of just removing them

[Bret Hughes]

On Thu, 2003-08-28 at 08:51, Kyle Harris wrote:
> Ya, but then that won't deliever any legitimate e-mails with .doc files
> that may have had a simple macro that could have been removed.  That is why
> I suggested a way to completely stop messages (nothing sent to intended
> recipient or sender) with some types of files
> (.scr, .pif, .bat, .vbs, .etc) since those messages most likely contain no
> legitimate contenat, only the virus itself AND to clean and send on others
> (such as .doc files).
>
> I don't see that this is currently possibly.
>

As I see it what you are asking for is separate handling of attachments
that are discarded because of the file name and those that are found to
contain a virus due to scanning?

something like:


if filename rules finds something {
        do something based on a setting (drop it on the floor?)
}
if virusfound {
        do something based on a different setting
}

This way MS don't even try to send the file to the AV software those
files that are not allowed at all but can decide how to treat them since
they are a different animal than files that have been scanned and found
to contain a virus

Is this what you mean?

Bret