File Types to be blocked

Can any one suggest the best practices for blocking the file type for the banking organizations. Please let us know what all file types have to blocked in Web security as the best practice to avoid the risk.