I know a long debate has been going on about if Sys Admins should filter this at the server level, or leave it up to the customer to filter, but for a bug like this, with DSL and Cable services being used in the home, it opens up a huge door to install DDoS clients. Also with the number of not so computer literate employees using e-mail at thier work with a nice high speed connection, the risk grows. I believe this is something that should be filtered at the server, because it could impact the ISP's network. The system admin is responsible for keeping the network up and working, and filters on e-mail is a good step to help ensure thier network stays that way. I believe for the most part, that you should put the responsibility on the user for attachments, etc, But this method really doesn't give them a chance, so block it at the server, for your own networks sake.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/62/2621#2621