Re : outgoing email monitoring

[abdelhakim aliane <hakim_al () yahoo fr>]

Hi, if you have MS Exchange 200X, use jounalising/archiving option. http://www.msexchange.org/tutorials/MF011.html

I do not use this because of we have not a well defined Email policy.
I usually use a simple way but not in real time : using scripting to search string with different tools (find, grep, 
powergrep, etc) along shared logfiles like \\exchSrv\exchSrv.log

----- Message d'origine ----
De : Noaman Khan <noamank () gmail com>
À : Matt Miller <madmillerx () gmail com>
Cc : security-basics () securityfocus com
Envoyé le : Mardi, 1 Mai 2007, 21h07mn 19s
Objet : Re: outgoing email monitoring


Hi,

You can probably set the outgoing mail queue to hold emails for
several hours or as required so that an admin can review the contents
of the queue. I believe this could be done with configuration of
sendmail if its used. I am not sure which mail server you are using
but it should be possible in sendmail/postfix. I am not sure about
exchange server.

Thanks

Noaman

On 5/1/07, Matt Miller <madmillerx () gmail com> wrote:
> hi list.
> I need a solution to monitor the flow of outgoing email traffic for data
> leak/security concerns. The two objectives that i have are:
> -monitoring and reporting -  who sends, how many and where to?
> -possibility to temporarily put outgoing all e-mail on hold for
> reviewing by admin/user and releasing for delivery.
>
> Any suggestions?
> Thanks
>
> Matt


      
___________________________________________________________________________ 
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! 
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses 
http://fr.answers.yahoo.com