I do work for a lot of small to midsized businesses around the Twin Cities area. So I was requested to build a mail server for a company. So I took a
Dell Poweredge and installed
CentOS 3.4 I also installed
Webmin so it would be easy to manage. I am a big believer in making things easy for me and my customers, (but more for me LOL). Finally I installed
Open Webmail which is a fairly nice web based email client with spell check, folders and filtering.
The machine ran well for a few months, spam starting becoming an issue so I installed
SpamAssassin to handle that, I then got a wierd request from my customer. "I would like all jpg and gif files as blocked attachments" I thought this was a minorly odd request so I asked further about it. "We are having issues with people getting inapproperate attachments" ok, got the idea
So doing a little searching on the web I found a neat program
MailScanner using SpamAssassin, and
ClamAV for virus scanning it handles all your email problems, INCLUDING blocking attachments, if required. So installing this I asked my customer to give me a list of extentions he would like blocked, it was rather long.
After a couple weeks running in this new configuration I got another call from the customer. "People are now renaming attachments to get around the blocking" Finally at this point I had to put on my security hat. "Listen, I can keep trying to block things in your email but you guys need to start looking at the source of your problems"
Companies cannot expect software to solve problems around users, at some point they need to lay the law down and say "Hey, this is a business, you are using OUR property, if your not doing business-like work on it, you could be terminated or at least taken out back and beat really hard (I wish)"
Or I can bill you 100 bucks every time you want me to block stuff.