Educause Security Discussion mailing list archives
Re:
From: Dick Jacobson <Dick.Jacobson () NDSU NODAK EDU>
Date: Wed, 15 Jun 2005 10:41:59 -0500
On Wed, 15 Jun 2005, Joel Rosenblatt wrote: Several of the policies cited in this discussion indicate that you may not allow mail into your system from Hotmail or Yahoo or anyplace else that allows non-name-based ids and/or do not know who their clients are. That may be a stretch but I believe that is the question being asked.
Our network use policy: <http://www.columbia.edu/cu/policy/network_use.html> Has the following section: 22. All messages must show accurately from where and from whom the message originated, except in the rare, specific cases where anonymous messages are invited. Joel Rosenblatt Joel Rosenblatt, Senior Security Officer & Windows Specialist, AcIS Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel --On Wednesday, June 15, 2005 8:28 AM -0400 Gary Flynn <flynngn () JMU EDU> wrote:Theresa Semmens wrote:We're looking at the possibility of providing in a policy that it would be an acceptable use violation to misrepresent who one is when communicating with a university official; particularly as it applies to employees. This is to get at the situation where someone uses an alias to communicate on a work related matter to someone else. I'm wondering if any of you have such a restriction in place, or could point me to a policy with such a restriction. Any advice or suggestions would be helpful.Our AUP has the following language: "# Not use university resources or computers attached to the university network to falsify identity, for example by: * Providing "pass through" service * Sending electronic mail under forged headers" By strict interpretation, if an external computer is used to send a forged message through the JMU network and/or to a JMU account, that is use of university resources. http://www.jmu.edu/JMUpolicy/1207.shtml -- Gary Flynn Security Engineer James Madison UniversityJoel Rosenblatt, Senior Security Officer & Windows Specialist, AcIS Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033 http://www.columbia.edu/~joel
-- ----------------------------------------------------------------------- Dick Jacobson e-mail : Dick.Jacobson () ndus NoDak edu ND HECN MultiUser Host SysAd office : IACC 206, NDSU NDUS IT Security Officer phone : 701-231-7385 -----------------------------------------------------------------------
Current thread:
- Re: Dick Jacobson (Jun 15)