blocking people from attaching files to web based emails

hi,

u can see under analyzer real time what's happen.

maybe this using https and not http.

cheers

Ashish Gupta wrote:

Not with a firewall. Your MTA or MSA programs are what you should look at.

Not with a firewall. Your MTA or MSA programs are what you should look at.

What MTA or MSA would you expect is being used when a user accesses their own web based email account?

Hi,

This could be very difficult or impossible. The best thing to do is block the users from accessing web-based emails.

Giorgos

I have no expectation whatsoever in that case. However, web servers themselves aren't mail servers, so it must hand off any outbound message to something that does handle mail.

I have no expectation whatsoever in that case. However, web servers themselves aren't mail servers, so it must hand off any outbound message to something that does handle mail.

However, in case of webmailers both the web and the mail server are not under your control.

To suppress sending of attechments through webmailers you'd have to inspect the unencrypted datastream. Meaning you'd have to either

- block SSL encrypted sessions to the webmailer

- break the SSL encryption for connections to the webmailer

However, that could get you into all kinds of privacy-related trouble, so I'd advise against doing so. Plus, an inside attacker could still encode any given file and send it inline, so just blocking attachments won't really help you here.

cu

Right -- So how would a local LAN intercept/handle mail being passed from Gmail's web server to Gmail's SMTP server?

It can't. However, where people run their OWN webmail (e.g. horde), such can be stripped off.

It can't. However, where people run their OWN webmail (e.g. horde), such can be stripped off.

It can't. However, where people run their OWN webmail (e.g. horde), such can be stripped off.

It can't. However, where people run their OWN webmail (e.g. horde), such can be stripped off.

It can't. However, where people run their OWN webmail (e.g. horde), such can be stripped off.

^^^^^^^^^^^^^^^^^^^^^^

However, the OP was specifically asking about *public* webmailers.

cu

We heard you the first time.