Attach rar file in the mail

Unanswered Question
Mar 13th, 2008
User Badges:

My company IronPort has limited outgoing mail attachment size to 13MB. Recently, I found that when I send a mail attached with a rar file (10MB), the IronPort has detected the message size is over 13MB. Actually, the message body contains few words and the attachment size is around 10MB.

I don't understand why when I attach a rar file in the mail. the mail size will be increased around 33%. I also tried sending rar in yahoo mail and got the same results. Do anybody know the reason??

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Donald Nash Thu, 03/13/2008 - 18:41
User Badges:

Binary files must be BASE64 encoded before being sent via e-mail. BASE64 is a 6-in-8 encoding, meaning that the file size is increased by 33%. The RAR file may be only 10 MB sitting on your disk, but it's 13.3 MB once it has been encoded for transit.

ezekiel_ironport Fri, 03/14/2008 - 17:50
User Badges:

Have a question here:

Let's say I want to completely remove executable, and I have policy to strip attachment file type executable.

How can I also strip the attachment if the executable is compressed (.zip or .rar)?

Will IronPort be able to detect? By binary?


Donald Nash Fri, 03/14/2008 - 19:11
User Badges:

How can I also strip the attachment if the executable is compressed (.zip or .rar)?

This is a complicated question. A message filter can peek inside archive files, but not compressed solitary files. In other words, a .exe file inside a ZIP archive can be detected. But a .exe file that has been gzipped (file.exe.gz), will not be detected.

The full explanation is in the "Policy Enforcement" chapter of the Advanced User Guide.


This Discussion