---

Which attachments does Outlook block?

Block all of the following at the mail server.

Outlook will block attachments with the following file extensions:

• *.ade Microsoft Access project extension
• *.adp Microsoft Access project
• *.bas Microsoft Visual Basic class module
• *.bat Batch file
• *.chm Compiled HTML Help file
• *.cmd Microsoft Windows NT Command Script
• *.com Microsoft MS-DOS program
• *.cpl Control Panel extension
• *.crt Security certificate
• *.exe Program
• *.hlp Help file
• *.hta HTML program
• *.inf Setup Information
• *.ins Internet Naming Service
• *.isp Internet Communication settings
• *.js JScript file
• *.jse Jscript Encoded Script file
• *.lnk Shortcut
• *.mdb Microsoft Access program
• *.mde Microsoft Access MDE database
• *.msc Microsoft Common Console Document
• *.msi Microsoft Windows Installer package
• *.msp Windows Installer patch
• *.mst Visual Test source files
• *.pcd Microsoft Visual Test compiled script or Photo CD image
• *.pif Shortcut to MS-DOS program
• *.reg Registration entries
• *.scr Screen saver
• *.sct Windows Script Component
• *.shb Shortcut into a document
• *.shs Shell Scrap Object
• *.url Internet shortcut
• *.vb VBScript file
• *.vbe VBScript Encoded Script file
• *.vbs VBScript file
• *.wsc Windows Script Component
• *.wsf Windows Script file
• *.wsh Windows Script Host Settings file

Also add the following if possible

• *.???.  Malformed file extension vulnerability (note the 'dot' at the end)
• *.{*     CLSID extension vulnerability

---

Test your e-mail Anti-Virus software by visiting….

http://www.gfi.com/emailsecuritytest