Attachments

It's not possible to programmatically filter passworded RAR files, but I will surely be deleting any RAR (or ZIP, for that matter) that our users report to be passworded.

I prefer RAR because it frequently offers a better compression ratio than ZIP.

Yeah, I'm not sure on how to prevent passworded archives - but we'll keep an eye out for anything that shouldn't be here.

I also normally use RAR files because of the better compression, but there is also the ability to add a "recovery record" which allows for a little corruption in data and will still allow complete data extraction. I think by default there is a 1% overhead, but you can crank this up a little and gain some extra protection. Nowadays the default value is often fine, but when floppy's were used it was a different case . I still use the RR at 5% for site backups out of old habit

I've just made sure that the server antivirus takes a look at attachments when they are written to provide an extra layer of protection .