Educause Security Discussion mailing list archives
Re: Filtering outgoing email [MESSAGE NOT SCANNED]
From: Zach Jansen <zjanse20 () CALVIN EDU>
Date: Wed, 24 Jun 2009 10:59:04 -0400
My experience has been that the outbound Barracuda's will sometimes catch the outgoing spam, but not always. Often it will catch a small part of the spam campaign and miss the bulk of it. I wouldn't consider it 100% effective by any means, but often it will catch enough outgoing "spam" to alert you that there is a problem. I think a big part of the problem is that spam scores are heavily reputation based, and unless you have a poor email reputation, it tends to keep the score pretty low. Of course, that's why the spammers like .edu web servers right? If you can monitor your mail queue's in any way that's probably a more effective way to do it. Zach
On 6/23/2009 at 3:13 PM, in message
<9FCC5E3E115754458674FA0BA5BA4F280176CD0A () EXCHANGEN4 oneonta edu>, "McClenon, Braden" <mcclenbw () ONEONTA EDU> wrote:
Just out of curiosity, since I've considered proposing outbound scanning with our Barracuda. If the phishing message got through the Barracuda when coming inbound, what makes you feel confident it will catch it, or a reply to it, outbound? This is why I always figured we'd need a different solution to monitor outbound traffic. Brady McClenon Senior Server Administrator SUNY Oneonta 607-436-3203-----Original Message----- From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Charles Seitz Sent: Tuesday, June 23, 2009 12:00 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Filtering outgoing email [MESSAGE NOT SCANNED] We use a Barracuda appliance for both incoming and outgoing email. On the outgoing side it looks for scams, bulk mail, and malware. It alsoscansthe text of each message looking for SSN's and blocks those and alerts the helpdesk so that they may take corrective action with the user. Repeat offenders get a pleasant call from me. I don't know that I'd call this an inexpensive solution, but it has been quite effective and reliable - far more reliable than their web content filter. Charles A. Seitz Senior Security Analyst University of Tennessee Information Security Office Martin Campus cseitz () tennessee edu (731) 881-7966 On 6/23/09 7:00 AM, "Kellogg, Brian D." <bkellogg () SBU EDU> wrote:We've been the victim of a phishing scam that made it through our incoming spam filter. The phisher used the compromised accounts tosendspam via Outlook Web Access. Just wondering whatinexpensive/reliablemethods others are using to filter outbound email and catch anyaccountsshowing a huge volume of outbound spam. Thanks... Thank you, Brian Kellogg Network Services Manager St. Bonaventure University 716-375-4092
Current thread:
- Re: Filtering outgoing email [MESSAGE NOT SCANNED] McClenon, Braden (Jun 23)
- <Possible follow-ups>
- Re: Filtering outgoing email [MESSAGE NOT SCANNED] Irish, Adrian L (Jun 23)
- Re: Filtering outgoing email [MESSAGE NOT SCANNED] Zach Jansen (Jun 24)