> Is there a way to block users from sending attachments via webmail
> (HTTPS)  - I do not want to block access to personal mail accounts.
> Just the ability for users to send attachments via.
> 
> so all users can access their gmail, yahoo, aol, hotmail... or
> whatever personal site they have (bluehost provided webmail
> account....)
> 
> they can send email but I would like to block attachments. Any way I
> can do this


Ultimately, no.
You can block HTTPS altogether, but that's probably not feasible for various 
reasons.  (Not least of which - many webmail providers now force HTTPS.)
You might theoretically enforce the use of an HTTP proxy, and then 
theoretically limit CONNECT-style requests (which is how HTTPS works through a 
proxy) at a certain maximum size, but that will inevitably break many websites 
in seemingly-random ways because of HTTP Keep-alive which also functions in 
HTTP/S.

This is the point of HTTPS, after all - completely opaque sessions from the 
browser all the way to the server, where you can't eavesdrop and you can't know 
what's going on in that connection.

-Adam Thompson
 [email protected]


_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to