What firewall to block downloads by file extension?

I'm trying to figure out the best way to block file downloads where the file has a certain extension (e.g. exe, mp3). Are there any firewalls that have this specifically as an option?

I'm not even sure if a firewall is the best way to go about this. I could probably find a way to block file extensions in IE and Firefox, but I hoped it would be possible to do at a system-wide level.

Would adding wildcard entries to a blocked URL list work? (e.g. block "*.exe".)

Thanks,
Ben

 

No firewall offers this feature (as far as I know) for the simple reason that it would be of little use. Filtering all .exe files may block the majority of malware but would also stop you from downloading legitimate software.

Rather than blocking downloads, restricting program execution would be a more sensible method - and software like Process Guard (free and full versions), System Safety Monitor, PrevX and Online Armor all include the ability to prompt you before letting any new (or altered) file run.

 

Ah, but that's entirely what I want to do. I'm going to set up a computer for friends and family to use, but they will be running limited user accounts. I'd like to block .exe and .mp3 downloads on those accounts.

Like you might find at work, I suppose, except I want to do it on a single computer running XP Home.

 

You can use chx to accomplish that(see payload section):

http://www.idrci.net/chx_beta/html/index.html


Downloads are here:

http://www.idrci.net/chx_beta/index.html


Best Regards,

Stefan