Re: Outbound E-mail rate limiting for users

[Christopher Jones <Christopher.Jones () UFV CA>]

Our anti-spam system has a rate control feature that begins throttling outbound messages on a per-user basis after more 
than 50 messages have been sent within a half hour period.  Fortunately, we are able to exempt specified mail lists and 
individuals so that larger volume mail-outs are not hampered.  We have found this this feature to be a good early 
warning that a user's account may have been compromised.


IT Services will never ask you to divulge your login credentials or complete a form via email.  All such requests are 
illegitimate and should be ignored or deleted.

Regards
Christopher Jones
IT Security Analyst
Information Technology Services
University of the Fraser Valley
33844 King Road
Abbotsford, B.C.  V2S 7M8
604.854.4566
Christopher.Jones () ufv ca<mailto:Christopher.Jones () ufv ca>

[UFV_Logo-Small]



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kincaid, 
Chris
Sent: Wednesday, December 12, 2012 3:54 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Outbound E-mail rate limiting for users

Colleagues,

Do any of you limit the amount of outbound e-mails a user can send in a given time?  The reason I ask is we are 
attempting to throttle outbound messages to cut off before we send out 75k spam messages in an afternoon, and then get 
blacklisted.  We use proofpoint, and they have a patch to throttle down outbound users after a threshold is crossed. I 
just don't want to set it too tight and cut off anyone legitimately sending out messages
Thanks,

Chris Kincaid, MBA
Associate Director, Enterprise Services|Information Technology Services
[Description: redlogo]
1200 East Colton Avenue |Redlands, CA 92373-0999