Welcome to ISAserver.org

Block downloading attachment

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Block downloading attachment

Page: [1]

Message

<< Older Topic Newer Topic >>

Block downloading attachment - 14.Apr.2006 10:08:25 AM

cinderellagcs

Posts: 9
Joined: 13.May2004
Status: offline

Hi,
We have an OWA website which is published by Mail Server Publishing Rule. To block downloading attachment by accessing OWA from the Internet, we also enabled blocking attachment in Microsoft Exchange 2003, but it doesn't still get any effect. There is a gap in OWA of MS Exchange, please refer more detail http://forums.msexchange.org/How_to_block_Attachment_in_draf_folder_via_OWA/m_1800403116/tm.htm
How can we do this on ISA? by using HTTP filter or anything
Your help will be highly appreciated

Many Thanks
Cinderellagcs

Post #: 1

Featured Links*

RE: Block downloading attachment - 14.Apr.2006 11:04:49 AM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

have u tried this in ISA ,
right click ur rule > Configure HTTP > Extensions
then choose , block Specified extensions as shown and start adding the extensions u desire to block

HTH

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to cinderellagcs)

Post #: 2

RE: Block downloading attachment - 14.Apr.2006 11:31:51 AM

cinderellagcs

Posts: 9
Joined: 13.May2004
Status: offline

But they can rename extensions which are out of blocked list. I knew and tried this but is does not secure closely.
Are there any other ways?
Thanks for your promptly reply,
Cinderellagcs

(in reply to cinderellagcs)

Post #: 3

RE: Block downloading attachment - 15.Apr.2006 1:12:29 AM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

then have u tried blocking by content type ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to cinderellagcs)

Post #: 4

RE: Block downloading attachment - 17.Apr.2006 4:47:51 AM

cinderellagcs

Posts: 9
Joined: 13.May2004
Status: offline

No way for filtering by content types

(in reply to elmajdal)

Post #: 5

RE: Block Uploading attachment - 3.May2006 9:16:54 AM

crazygye

Posts: 14
Joined: 2.Sep.2005
Status: offline

Hi,

I want to block uploading attatchment more than 5mb.Is it possible with Isa 2004.Even i want to do such configuration that User should not be able to Send attatchment more than 5 mb through Yahoo,Msn, or any Web mail also.Can any one tell me how to Configure it.

Thanx.

(in reply to cinderellagcs)

Post #: 6

RE: Block downloading attachment - 23.May2006 8:16:23 AM

textguru

Posts: 223
Joined: 4.May2004
From: Philippines
Status: offline

quote:

ORIGINAL: elmajdal

have u tried this in ISA ,
right click ur rule > Configure HTTP > Extensions
then choose , block Specified extensions as shown and start adding the extensions u desire to block

HTH

I have tried this but it seams that Yahoo mail didn't recognize this extension filtering. I have .zip attachment on my yahoo mail and tried downloading the file if it will block or not but sad to say it allow me to download the zip file. can we block access on this?

(in reply to elmajdal)

Post #: 7

RE: Block downloading attachment - 16.Jun.2006 4:19:17 AM

textguru

Posts: 223
Joined: 4.May2004
From: Philippines
Status: offline

quote:

ORIGINAL: elmajdal

then have u tried blocking by content type ?

How to block web access by content type?

(in reply to elmajdal)

Post #: 8

RE: Block downloading attachment - 8.Sep.2006 9:43:00 PM

Rayanss

Posts: 6
Joined: 6.Sep.2006
Status: offline

personnaly i used Symantec mail security for exchange, u can block all attachments by extension and by size.
even if u block .exe entensions and its in a .zip file it will be blocked!

(in reply to cinderellagcs)

Post #: 9

RE: Block downloading attachment - 11.Sep.2006 2:10:33 AM

textguru

Posts: 223
Joined: 4.May2004
From: Philippines
Status: offline

quote:

ORIGINAL: Rayanss

personnaly i used Symantec mail security for exchange, u can block all attachments by extension and by size.
even if u block .exe entensions and its in a .zip file it will be blocked!

What if they wanted to rename the file extension to the extension that they know that system will not block? Like for example, they will rename .exe to .map then advise the receiver to rename it to .exe once attachment is downloaded. Will blocking by content type will work on this?

(in reply to Rayanss)

Post #: 10

RE: Block downloading attachment - 11.Sep.2006 9:55:15 AM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

if u want to block by content type, then create :

Deny > All Outbound > From Internal > To External > All users

Then right click your rule > properties and u will find a Tab called content type. then select the content type u want to block

HTH

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to textguru)

Post #: 11