Security Basics mailing list archives
RE: Re : outgoing email monitoring
From: "Nick Duda" <nduda () VistaPrint com>
Date: Wed, 2 May 2007 15:28:20 -0400
Look into Trend Interscan Messaging Security Suite. This does exactly what you want. It has hold queues. It's a very powerful email content filtering system, we use it (not affiliated with trend). You write rules, similiar to firewall rules, (if this = x and also this = x but not = x then do x). You can do anything to any kind of mail, inject, remove content, alert/notify...etc. We have some rules setup to do exactly what you want. The product is fairly cheap and runs inline on the same box as a sendmail/postfix relay. ________________________________ From: listbounce () securityfocus com on behalf of jbeauford () EightInOnePet com Sent: Wed 5/2/2007 1:52 PM To: hakim_al () yahoo fr; noamank () gmail com; madmillerx () gmail com Cc: security-basics () securityfocus com Subject: RE: Re : outgoing email monitoring I demoed a product called MAILMETER It was very powerful at that time, and I'm sure they've only improved. Maybe this solution will work for you? http://www.waterfordtechnologies.com/ JMB -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of abdelhakim aliane Sent: Wednesday, May 02, 2007 5:31 AM To: Noaman Khan; Matt Miller Cc: security-basics () securityfocus com Subject: Re : outgoing email monitoring Hi, if you have MS Exchange 200X, use jounalising/archiving option. http://www.msexchange.org/tutorials/MF011.html I do not use this because of we have not a well defined Email policy. I usually use a simple way but not in real time : using scripting to search string with different tools (find, grep, powergrep, etc) along shared logfiles like \\exchSrv\exchSrv.log ----- Message d'origine ---- De : Noaman Khan <noamank () gmail com> À : Matt Miller <madmillerx () gmail com> Cc : security-basics () securityfocus com Envoyé le : Mardi, 1 Mai 2007, 21h07mn 19s Objet : Re: outgoing email monitoring Hi, You can probably set the outgoing mail queue to hold emails for several hours or as required so that an admin can review the contents of the queue. I believe this could be done with configuration of sendmail if its used. I am not sure which mail server you are using but it should be possible in sendmail/postfix. I am not sure about exchange server. Thanks Noaman On 5/1/07, Matt Miller <madmillerx () gmail com> wrote:
hi list. I need a solution to monitor the flow of outgoing email traffic for data leak/security concerns. The two objectives that i have are: -monitoring and reporting - who sends, how many and where to? -possibility to temporarily put outgoing all e-mail on hold for reviewing by admin/user and releasing for delivery. Any suggestions? Thanks Matt
___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com <http://fr.answers.yahoo.com/> --------------------- Confidentiality note The information in this email and any attachment may contain confidential and proprietary information of VistaPrint and/or its affiliates and may be privileged or otherwise protected from disclosure. If you are not the intended recipient, you are hereby notified that any review, reliance or distribution by others or forwarding without express permission is strictly prohibited and may cause liability. In case you have received this message due to an error in transmission, please notify the sender immediately and delete this email and any attachment from your system. ---------------------
Current thread:
- Re : outgoing email monitoring abdelhakim aliane (May 02)
- RE: Re : outgoing email monitoring jbeauford (May 02)
- RE: Re : outgoing email monitoring Nick Duda (May 02)
- RE: Re : outgoing email monitoring jbeauford (May 02)