OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Garth Rustin (GRustincecilsaydah.com)
Date: Thu Jan 03 2002 - 09:17:01 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

     There is a windows solution to this that I have not yet seen mentioned
    here: Trend Micro's VirusWall with the eManager plug in. It works very well
    at the server.

    -----Original Message-----
    From: SteveFdice.com
    To: focus-mssecurityfocus.com
    Sent: 1/3/2002 6:01 AM
    Subject: RE: Exchange 5.5 locking down

    > My solution was to just start using the sniffer ethereal. It
    > will do smtp
    > decodes so you can see the whole message, headers, etc
    > without worrying
    > about MS exchange logging, plus you can use it whenever you
    > please and in
    > some cases dont even have to touch the exchage server (if you
    > are on a hub
    > or somwhere that is easily sniffable).

    I realize that this is an MS focused list, but my solution to the
    spamming
    problem was to funnel all incoming email into Linux host running
    sendmail,
    which virus scans and rejects mail based on originating IP, and has the
    capability to reject based on content as well, though we do not do that.
    We
    can also use this machine to query the Realtime Blackhole List (RBL) for
    known spamming sources and reject them automatically. This is another
    feature that we are currently not using. Doing this has taken a bit of
    the
    load of dealing with the SPAM off of my Exchange server.

    Steve Fuller