<html><body bgcolor="#FFFFFF">
<p><font size="2" face="sans-serif">Hello Jules,</font><br>
<br>
<font size="2" face="sans-serif">yes i mean someone working for my company.</font><br>
<br>
<font size="2" face="sans-serif">My idea would be some kind of "blacklist" for email domains used in unregistered dropoff. Is there a possibility to implement it?</font><br>
<br>
<font size="2" face="sans-serif">What other things can a do, not to prevent it completely, but decrease the possibility.</font><br>
<br>
<font size="2" face="sans-serif">Mit freundlichen Grüßen / Best regards<br>
<br>
Patrick Gaikowski<br>
Tel: +49 7132 94 3568<br>
Fax: +49 7132 94 73568<br>
E-Mail: patrick.gaikowski@kaufland.com<br>
KI 967850: IT International / IT Governance / Netzwerk Design und IT-Sicherheit<br>
Office:<br>
Lindichstrasse 11<br>
D-74189 Weinsberg</font><br>
<br>
<br>
<br>
<font size="2" face="sans-serif"><a href="http://www.kaufland.de">http://www.kaufland.de</a> </font><br>
<font size="2" face="sans-serif"><a href="http://www.spannende-it.de">http://www.spannende-it.de</a></font><br>
<font size="2" face="sans-serif">Wir sind die Nr. 1:</font><br>
<font size="2" face="sans-serif">Kaufland ist "Bester Lebensmittelmarkt 2011"!</font><br>
<br>
<font size="2" face="sans-serif">Kaufland Informationssysteme GmbH & Co. KG</font><br>
<font size="2" face="sans-serif">Postfach 12 53 - 74149 Neckarsulm<br>
Kommanditgesellschaft<br>
Sitz: Neckarsulm<br>
Registergericht: Stuttgart HRA 104163</font><br>
<br>
<br>
<br>
<br>
<br>
<ul style="padding-left: 18pt"><img width="16" height="16" src="cid:1__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt="Inactive hide details for Jules ---01.03.2012 10:28:39---Jules <Jules@zend.to>"><font size="2" color="#424282" face="sans-serif">Jules ---01.03.2012 10:28:39---Jules <Jules@zend.to></font></ul>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr valign="top"><td width="40%">
<ul style="padding-left: 9pt"><font size="1" face="sans-serif"><b>Jules <Jules@zend.to></b></font><font size="1" face="sans-serif"> </font><br>
<font size="1" face="sans-serif">Gesendet von: zendto-bounces@zend.to</font>
<p><font size="1" face="sans-serif">01.03.2012 10:25</font>
<table border="1">
<tr valign="top"><td width="168" bgcolor="#FFFFFF">
<ul style="padding-left: 0pt"><font size="1" face="sans-serif">Bitte antworten an<br>
ZendTo Users <zendto@zend.to></font></ul>
</td></tr>
</table>
</ul>
</td><td width="60%">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr valign="top"><td width="1%" valign="middle"><img width="66" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
</td><td width="100%"><img width="1" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
<font size="1" face="sans-serif">ZendTo Users <zendto@zend.to></font></td></tr>
<tr valign="top"><td width="1%" valign="middle"><img width="66" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
</td><td width="100%"><img width="1" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
</td></tr>
<tr valign="top"><td width="1%" valign="middle"><img width="66" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
<div align="right"><font size="1" face="sans-serif">Thema </font></div></td><td width="100%"><img width="1" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""><br>
<font size="1" face="sans-serif">[ZendTo] Re: Security Issue - Data Leakage Prevention</font></td></tr>
</table>
<table border="0" cellspacing="0" cellpadding="0">
<tr valign="top"><td width="58"><img width="1" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""></td><td width="336"><img width="1" height="1" src="cid:2__=4EBBF327DFAF14698f9e8a93@de.int.kaufland" border="0" alt=""></td></tr>
</table>
</td></tr>
</table>
<br>
<font size="3" face="serif">By "unregistered user" do you mean someone who works for your company? If so, ZendTo won't stop them stealing files from your company. No-one can stop that unless you cavity search your employees at the end of each working day.<br>
<br>
Jules.<br>
<br>
On 29/02/2012 17:06, </font><a href="mailto:patrick.gaikowski@kaufland.com"><font size="3" color="#0000FF" face="serif"><u>patrick.gaikowski@kaufland.com</u></font></a><font size="3" face="serif"> wrote: </font>
<ul style="padding-left: 36pt"><br>
<font size="2" face="sans-serif">Hallo Jules,</font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
one of my colleagues pointed a scenario out where he could upload a file to outside the company without rights to do it.</font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
For us it is a big security issue!</font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
1.) unregistered user clicks on Drop-Off and sends an email to his company email address<br>
2.) unregistered user uploads a file from company network to his own company email address<br>
3.) unregistered user forwards the upload information to his private email address from Mail Client<br>
4.) unregistered user Picks up the file from his private PC</font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
My question is, if it is possible to exclude the company email domains, like defined in preferences.conf, from getting an upload link to corporate email without Authorization? </font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
Mit freundlichen Grüßen / Best regards<br>
<br>
Patrick Gaikowski<br>
Tel: +49 7132 94 3568<br>
Fax: +49 7132 94 73568<br>
E-Mail: </font><a href="mailto:patrick.gaikowski@kaufland.com"><font size="2" color="#0000FF" face="sans-serif"><u>patrick.gaikowski@kaufland.com</u></font></a><font size="2" face="sans-serif"><br>
KI 967850: IT International / IT Governance / Netzwerk Design und IT-Sicherheit<br>
Office:<br>
Lindichstrasse 11<br>
D-74189 Weinsberg</font><font size="3" face="serif"><br>
<br>
</font><font size="2" color="#0000FF" face="sans-serif"><u><br>
</u></font><a href="http://www.kaufland.de/"><font size="2" color="#0000FF" face="sans-serif"><u>http://www.kaufland.de</u></font></a><font size="2" face="sans-serif"> </font><font size="2" color="#0000FF" face="sans-serif"><u><br>
</u></font><a href="http://www.spannende-it.de/"><font size="2" color="#0000FF" face="sans-serif"><u>http://www.spannende-it.de</u></font></a><font size="2" face="sans-serif"><br>
Wir sind die Nr. 1:<br>
Kaufland ist "Bester Lebensmittelmarkt 2011"!</font><font size="3" face="serif"><br>
</font><font size="2" face="sans-serif"><br>
Kaufland Informationssysteme GmbH & Co. KG<br>
Postfach 12 53 - 74149 Neckarsulm<br>
Kommanditgesellschaft<br>
Sitz: Neckarsulm<br>
Registergericht: Stuttgart HRA 104163</font><font size="3" face="serif"><br>
<br>
<br>
<br>
<br>
<br>
</font>
<p><br>
<tt><font size="3">_______________________________________________<br>
ZendTo mailing list<br>
</font></tt><a href="mailto:ZendTo@zend.to"><tt><font size="3" color="#0000FF"><u>ZendTo@zend.to</u></font></tt></a><tt><font size="3"><br>
</font></tt><a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto"><tt><font size="3" color="#0000FF"><u>http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto</u></font></tt></a></ul>
<br>
<tt><font size="3">Jules<br>
<br>
-- <br>
Julian Field MEng CITP CEng<br>
</font></tt><a href="http://www.zend.to/"><tt><font size="3" color="#0000FF"><u>www.Zend.To</u></font></tt></a><tt><font size="3"><br>
<br>
Follow me at twitter.com/JulesFM<br>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<br>
<br>
'It's okay to live without all the answers' - Charlie Eppes, 2011<br>
'All programs have a desire to be useful' - Tron, 1982<br>
'That is the land of lost content,<br>
I see it shining plain,<br>
The happy highways where I went,<br>
And cannot come again.' - A.E. Houseman<br>
</font></tt><tt><font size="2">_______________________________________________<br>
ZendTo mailing list<br>
ZendTo@zend.to<br>
</font></tt><tt><font size="2"><a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto">http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto</a></font></tt><br>
</body></html>