Security Basics mailing list archives

Re: Checkpoint or other Solution required


From: "Chris Barber" <cmbarber () gmail com>
Date: Fri, 8 Aug 2008 10:20:02 -0700

Then I would definately configure your solution to reject the message
and give the sender the opportunity fix a message that is intended for
your line of business.  You would not want to have a potential
customer to send in an order for a product and have the message
dropped because it had a mis-spelled tag line and the customer calls
up 3 weeks later checking on an order you never received bucause your
required tagline should have been [SALES-JRP] and his order had the
tagline [SALES-JPR].  If you reject it, the order would bounce and the
customer could see the typo.  That is not to say you would want to
state in the message what the tagline should be.

Chris.

On Mon, Jul 28, 2008 at 1:14 PM, Taiwo Adekoya <koyass () yahoo com> wrote:

I want to ensure that if the content or the Subject line does not contain a paticular text string, i would drop the 
message. That way I am able to restrict incoming emails to only those pertaining to our line of business



----- Original Message ----
From: Javier Reyna Padilla <jreyna () onlinet com mx>
To: Taiwo Adekoya <koyass () yahoo com>
Cc: security-basics <security-basics () securityfocus com>
Sent: Wednesday, July 23, 2008 12:32:55 PM
Subject: Re: Checkpoint or other Solution required

You can check e-mail content using smtp-resources, but this is not a
solution for inspecting a large volume of messages, your FW will be
overloaded for sure.You can check email content usin an IPS such as ISS
Proventía, snort_inline, tipping point,  an antispam sucha as barracuda
spam firewall or just directlly in your smtp server using postifx
spamassessing... What type of content are you triyin to search? an
specific with just some regex or  SPAM?


Javier Reyna

Taiwo Adekoya wrote:
Does anyone have a clue on a checkpoint product that can act as an Security policy enforcer ?
Assuming that I need to ensure that all incoming emails contain only certain contents, any bthother comntent would 
make the email be dropped. I have seen Posini. IS there any other out there ?
Cheers





Current thread: