RE: Best Practices on Web based email ?

[<Bill_Roswell () oxy com>]

The latter screening accounts lake hotmail.com, aol.com, Yahoo.com

Thanks,



Bill

Security Architect
Oxy Inc. IT-Security
Occidental Petroleum Corporation
Houston, Texas
713-215-7976
 

THIS MESSAGE CONTAINS CONFIDENTIAL INFORMATION AND TRADE SECRETS 
OF OCCIDENTAL.  UNAUTHORIZED USE OR DISCLOSURE IS PROHIBITED.




-----Original Message-----
From: Stefan Marx [mailto:marx.s () gmx net] 
Sent: Thursday, September 04, 2003 1:09 PM
To: security-basics () securityfocus com
Subject: Re: Best Practices on Web based email ?


Hi,

do you mean a web frontend to your internal mail server, that may be
accessed from the outside? Or do you talk about accessing webbased email
accounts in the internet like yahoo.com or hotmail.com or the like?

Regards,

Stefan

> Do you allow web based email? What is the best practice advice from a
> security standpoint?  Do you have any restrictions since you can't
> remove attachments or force a virus scan or force content/header
> filtering?



------------------------------------------------------------------------
---
Attend Black Hat Briefings & Training Federal, September 29-30
(Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event
in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------