Search UC DavisHelp
UC Davis Home Page
UC Davis - Office of the Chancellor - UCD Directives UCD Directives

UC DAVIS: INFORMATION AND EDUCATIONAL TECHNOLOGY

August 26, 2004

DEANS, DIRECTORS, DEPARTMENT CHAIRS, AND CAMPUS/UCDMC ADMINISTRATIVE OFFICERS

RE: Filtering of Unsafe Email Attachments

On Monday, August 30, 2004, UC Davis will join the ranks of many other institutions 
of higher education and start blocking certain types of file attachments from being 
transmitted through the campus email system. This preventive measure involves only 
those types of file extensions that present a known and significant threat of 
infection. Since most viruses, including the recent Klez, MyDoom, and Bagle, are 
now being transmitted as attachments through electronic email, blocking the 
attachments most commonly used by viruses will help protect both individual 
computers and University systems, research, and data.

The list of file attachment types that the campus will block is derived from 
Microsoft's list of "unsafe" file types. It includes such extension types as ".exe," 
".cmd" and ".pif" (i.e., extensions not commonly used by most campus members).  The 
UC Davis list has been reviewed by various campus groups, including senior campus 
administrators, technical staff, and faculty representatives, who have expressed 
their support for this measure. Microsoft in fact already blocks these unsafe 
extensions in Microsoft Outlook and Outlook Express. In addition, similar 
restrictions have already been implemented by various UC Davis departments with 
success and minimal, if any, disruption of legitimate email.  Other universities, 
including Cambridge University, Dartmouth University, Harvard University, Rutgers 
University and UC Irvine have also begun to restrict similar file types.

A Web page has been developed that provides detailed information about this measure 
as well as the list of file extensions that will be blocked and alternatives for 
transmitting the files (see http://security.ucdavis.edu/attach_restrict.cfm). In 
brief, email messages containing unsafe types of attachments will still be delivered, 
but the attachments will be removed. Senders of blocked email attachments will not 
receive a warning from the mail server. However, the recipient of the email message 
will be notified that the attachment has been removed. The notification will include 
the name of the attachment, the reason for removing the attachment, and options for 
resending the attachment as an unrestricted file type. Options include changing the 
name of the file extension to an unblocked file type, placing the file in MySpace 
(the file-sharing section of the MyUCDavis portal) or some networked drive, or using 
other file-sharing media (e.g., CD, Zip).  Recipients will also be ref!
 erred to the Web page for more information about the campus's file attachment 
 blocking measure.

While this measure is expected to further improve the campus' computer and network 
security, faculty, students and staff are encouraged to remain on-guard against the 
threat of email viruses and to take personal responsibility to ensure that individual 
actions do not compromise the valuable resources of others, and the resources of our 
campus (see http://security.ucdavis.edu/security101.cfm for a list of Ten Steps to 
Safe Computing). Please continue to use discretion when opening email attachments, 
especially those attachments that are unexpected or from unknown senders.

Please forward any questions regarding this change to Robert Ono, IT Security 
Coordinator, at 530-757-5795, or raono@ucdavis.edu.

Dave Shelby
Assistant Vice Provost and Chief Operating Officer -- 
Information and Educational Technology

04-084



Office of the Chancellor | Contact Information | Current Issues | Speaking Out | Staff and Organization | Philosophy of Purpose | Principles of Community | Administrative Resources

Modified: 12/14/2006 12:24:40 PM
Comments: