Security Basics mailing list archives
Re: Checkpoint or other Solution required
From: "Chris Barber" <cmbarber () gmail com>
Date: Fri, 8 Aug 2008 10:20:02 -0700
Then I would definately configure your solution to reject the message and give the sender the opportunity fix a message that is intended for your line of business. You would not want to have a potential customer to send in an order for a product and have the message dropped because it had a mis-spelled tag line and the customer calls up 3 weeks later checking on an order you never received bucause your required tagline should have been [SALES-JRP] and his order had the tagline [SALES-JPR]. If you reject it, the order would bounce and the customer could see the typo. That is not to say you would want to state in the message what the tagline should be. Chris. On Mon, Jul 28, 2008 at 1:14 PM, Taiwo Adekoya <koyass () yahoo com> wrote:
I want to ensure that if the content or the Subject line does not contain a paticular text string, i would drop the message. That way I am able to restrict incoming emails to only those pertaining to our line of business ----- Original Message ---- From: Javier Reyna Padilla <jreyna () onlinet com mx> To: Taiwo Adekoya <koyass () yahoo com> Cc: security-basics <security-basics () securityfocus com> Sent: Wednesday, July 23, 2008 12:32:55 PM Subject: Re: Checkpoint or other Solution required You can check e-mail content using smtp-resources, but this is not a solution for inspecting a large volume of messages, your FW will be overloaded for sure.You can check email content usin an IPS such as ISS ProventÃa, snort_inline, tipping point, an antispam sucha as barracuda spam firewall or just directlly in your smtp server using postifx spamassessing... What type of content are you triyin to search? an specific with just some regex or SPAM? Javier Reyna Taiwo Adekoya wrote:Does anyone have a clue on a checkpoint product that can act as an Security policy enforcer ? Assuming that I need to ensure that all incoming emails contain only certain contents, any bthother comntent would make the email be dropped. I have seen Posini. IS there any other out there ? Cheers
Current thread:
- Re: Checkpoint or other Solution required Chris Barber (Aug 08)