blocking people from attaching files to web based emails

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View


Hi,

In our office, we have Websense which blocks certain sites. We still
allow users to use web based emails such as Gmail, Yahoo Mail etc.

Is there any way to let users access such web based emails but block
them from attaching files to these emails.

Thanks and best regards,
Ashish

Re: blocking people from attaching files to web based emails


hi,

u can see under analyzer real time what's happen.

maybe this using https and not http.

cheers

 Ashish Gupta wrote:
Quoted text here. Click to load it

Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it

Not with a firewall.  Your MTA or MSA programs are what you should look at.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it

Not with a firewall.  Your MTA or MSA programs are what you should look at.



Re: blocking people from attaching files to web based emails



Quoted text here. Click to load it

What MTA or MSA would you expect is being used when a user accesses
their own web based email account?

Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
at.

I have no expectation whatsoever in that case.  However, web servers
themselves aren't mail servers, so it must hand off any outbound message to
something that does handle mail.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it

However, in case of webmailers both the web and the mail server are not
under your control.

To suppress sending of attechments through webmailers you'd have to
inspect the unencrypted datastream. Meaning you'd have to either

- block SSL encrypted sessions to the webmailer
- break the SSL encryption for connections to the webmailer

However, that could get you into all kinds of privacy-related trouble,
so I'd advise against doing so. Plus, an inside attacker could still
encode any given file and send it inline, so just blocking attachments
won't really help you here.

cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich

Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
at.

I have no expectation whatsoever in that case.  However, web servers
themselves aren't mail servers, so it must hand off any outbound message to
something that does handle mail.



Re: blocking people from attaching files to web based emails



Quoted text here. Click to load it

Right -- So how would a local LAN intercept/handle mail being passed
from Gmail's web server to Gmail's SMTP server?

Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
still
block
look
to

It can't.  However, where people run their OWN webmail (e.g. horde), such
can be stripped off.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
                                                   ^^^^^^^^^^^^^^^^^^^^^^
Quoted text here. Click to load it
[...]
Quoted text here. Click to load it

However, the OP was specifically asking about *public* webmailers.

cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich

Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
still
block
look
to

It can't.  However, where people run their OWN webmail (e.g. horde), such
can be stripped off.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
still
block
look
to

It can't.  However, where people run their OWN webmail (e.g. horde), such
can be stripped off.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
still
block
look
to

It can't.  However, where people run their OWN webmail (e.g. horde), such
can be stripped off.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it
still
block
look
to

It can't.  However, where people run their OWN webmail (e.g. horde), such
can be stripped off.



Re: blocking people from attaching files to web based emails


Quoted text here. Click to load it

We heard you the first time.

--
Jon Solberg (remove "nospam." from email address).

Re: blocking people from attaching files to web based emails


Hi,

This could be very difficult or impossible.
The best thing to do is block the users from accessing web-based
emails.

Giorgos

--

NetPros Community
http://netpros.freeforums.org

Quoted text here. Click to load it


Site Timeline