attachment group executable and filetype .java

[Michael Eriksson]

Hi,

I got a question regarding attachment blocking. We are using it on executables and it always worked fine. Today I got a call from a user that didn't like that java script files are stopped. I think they should be stopped, so I'm fine with that.  But when I look at the documentation of the the attachment-group it says:

Executable
• exe
• java
• msi
• pif
Note
Filtering the Executable group will also scan .dll and .scr files, but you cannot
filter these file types individually.

So I wonder, does java in the list include all types of java-files including .js?

Regards

Micke

[Dustin Anderson · Accepted solution]

As far as I know .js is allowed unless you make a separate content filter. We had a separate filter of any file type they would try to send malicious code in. This is what we uses and had .jar and .js added.

\.(7z|acea|ade|adp|ashx|bas|bat|cab|chm|cmd|com|cpl|crt|css|daa|download|emz|exe|gz|hlp|hta|img|inf|ins|iqy|iso|isp|jar|js|jse|json|lnk|lzh|mdb|mde|mht|msc|msi|msp|mst|one|pcd|pif|ppsx|r[0-9][0-9]|rar|rarj|reg|rev|scr|sct|shb|shs|tbz|url|uue|vb|vbe|vbs|wmz|wsc|wsf|wsh|xll|z)$