Content Filtering AFTER Spam Filtering, not before! or OPTION [message #146120] |
Thu, 27 June 2019 12:46 |
ian.bugeja
Messages: 666 Registered: March 2017 Location: Malta
|
|
|
|
Content Filtering is currently processed BEFORE Spam Filtering. However since the new way of malware is included in .zip files, I have decided to BLOCK .zip, .7z files. Since this is possibly a legit form of sending emails that our vendors do use, I have a user notification of the quarantine so they can email me if needed to release it. I would 'not' want an end user access to the quarantine to release as someone else noted.. I just don't trust the end user to make that judgement call, as too many people decide to click these malware emails in the first place. So my point is make the content filter AFTER the spam filter. So I think it should first check malware/virus, then spam, then content filter. So if someone that is whitelisted sends a .zip they make it through malware, make it through spam (whitelisted), and blocked at content and user email goes out. A fake email sending bad .zip attachment. Makes it past malware/virus apparently, gets BLOCKED at spam level due to one of those rules, never makes it to content filter and thus no user notification goes out. THus limiting only mostly legit .zip user notifications. I think this is a better priority level, I don't see the issue with this priority scheme. Since more and more .zip is being used by spammers, most would still get caught there as normally would.
|
|
|