Re: Outbound spam control

[Graham Toal <gtoal () UTPA EDU>]

> What about enforcing SMTP authentication on your mail servers?

If the threat is that one of your inside machines is compromised
and being used as a spambot via your own mail server, it's just as
likely that the next variation of the bot will grab the SMTP auth
parameters from your config and still send via your server.

rate limiting on outgoing is probably the best bet; even if some
slip by at a slow rate, you're unlikely to end up in a blacklist
because of it.

content filtering on outgoing is tempting but far too likely to
produce false positives.

G