Restricting the downloading of .exe,.zip files

[Ken Becker]

If you are using Ikiosk, you can go into Netscape and choose Options -
General Preferences - Helpers tab.  Then, for files with .exe, .zip and
any other extension you dislike, you can change the "Action" to Unknown -
Prompt User.

Then using Ikiosk you can disable the buttons in that "Unknown File Type"
dialog box so that the person can't save the file.  If there are some file
types you DO want to allow people to download, then for those extensions
you then need to change the "Action" to "Save to Disk", or link the file
type with some application on your machine.

Ken Becker
Menlo Park Pub. Lib.

On Tue, 26 May 1998, Bill Hudson wrote:

> Hi Marty,
> Could you tell us what security measures have been taken already on your
> machines? That would certainly help guide any suggestions, as well as
> alert list members to any holes in our own security.
> 
> Thanks,
> Bill Hudson
> 
> Marty Williams wrote:
> > 
> > Having recently come across a situation in one of our libraries (a joint =
> > use school / community) where a clever lad downloaded and installed a pice =
> > of software that logs all logins we are obviously concerned about the =
> > security implications. As a possible solution I would like to know if =
> > anyone has found a means of restricting the files that can be downloaded =
> > from the web? If we could ensure that executable or zipped files cannot be =
> > downloaded, this would go some way towards prevention.
> > 
> > Any other lines of attack are also welcomed.
> > 
> > Thanks
> > 
> > Marty Williams
> > www.terra.net.au/=7Emarwil/cool/home.htm
> 
> -- 
> ***********************************************************************
> Bill Hudson, Technology Coordinator
> Lancaster County Library
> 125 N. Duke Street, Lancaster, PA  17602-2883     USA
> 
> Voice: 717.394.2651    Fax: 717.394.3083
> Email: bhudson at lancaster.lib.pa.us
>