Re: Filtering outgoing email

["Gregg, Christopher S." <csgregg () STTHOMAS EDU>]

We're using MailMarshal to watch for spikes in e-mail traffic, and we're moving forward with plans to filter outbound 
e-mail in general using the tool as well.  The thinking is that it will add two additional checks against phishing 
schemes.  One, it might catch the initial response to the phishing e-mail (because no amount of education seems to be 
able to stop all responses) and two, it should help stop or slow the use of the compromised account to send spam.  Our 
testing has shown that we will catch a small amount of legitimate (human sent, non-spam) traffic each day with such a 
solution, but it does not appear to be critical business or academic related content.

I think a couple of years ago our community would have been hesitant to filter outgoing mail, but with all of the 
phishing and being blacklisted by various providers over the last 12-24 months I think people will be OK now.

Chris

Chris Gregg
Director of Information Technology
Information Resources and Technologies
University of St. Thomas
2115 Summit Avenue
St. Paul, Minnesota 55105
csgregg () stthomas edu


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kellogg, 
Brian D.
Sent: Tuesday, June 23, 2009 7:01 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Filtering outgoing email

We've been the victim of a phishing scam that made it through our incoming spam filter.  The phisher used the 
compromised accounts to send spam via Outlook Web Access.  Just wondering what inexpensive/reliable methods others are 
using to filter outbound email and catch any accounts showing a huge volume of outbound spam.  Thanks...

 
 
Thank you,
 
Brian Kellogg
Network Services Manager
St. Bonaventure University
716-375-4092