Re: blocking port 25 at the border?

[Curt Wilson <curtw () SIU EDU>]

Bob Bayn wrote:
> Do you regulate port 25 at the border?

Yes, both incoming and outbound.

> If so, what is your procedure for allowing an exception
> (for a legit email server)?

A firewall rule worksheet must be submitted and approved. The host must
have a basic security assessment performed before the firewall rule is
placed.

> What administrative approvals were required at your
> institution before you could regulate port 25?

All it took was some pain of being blacklisted for sending spam from our
netblock and that cleared any bureaucratic hurdle without me needing to
do anything. sometimes pain is the only thing that makes change happen.

> Bob Bayn
> IT Security Team
> Utah State University
> Logan, UT


--
Curt Wilson
IT Network Security Officer
Southern Illinois University Carbondale
618-453-6237

GnuPG key: http://www.infotech.siu.edu/security/curtw.pub.asc