RE: Blocking email through the web services

["Noonan, Wesley" <Wesley_Noonan () bmc com>]

Agreed. There are so many webmail services that it is near impossible to
block if someone really wants to access them. For example, many Mom and Pop
ISP's have webmail services that can connect to any POP server, meaning you
would need to block all of them if you really want to keep people from
accessing external mail.

Like Paul says, this is a people policy issue that requires a people policy
solution. Have your users sign an AUP, then enforce penalties when people
violate the AUP.

Thanks.

Wes Noonan, MCSE/CCNA/CCDA/NNCSS/Security+
Senior QA Rep.
BMC Software, Inc.
(713) 918-2412
wnoonan () bmc com
http://www.bmc.com


> -----Original Message-----
> From: Paul D. Robertson [mailto:proberts () patriot net]
> Sent: Wednesday, January 22, 2003 08:30
> To: seadog () jb ro
> Cc: firewall-wizards () nfr net
> Subject: Re: [fw-wiz] Blocking email through the web services
>
> On 22 Jan 2003 seadog () jb ro wrote:
>
> > Is there a common port I can block that will prevent users from
> > downloading email from webmail services such as aol, hotmail or msn,
> used
> > by all - without blocking www service in general?
>
> No, you have to block Webmail services by either DNS or IP address and
> back it up with a strong policy.
>
> Paul
> --------------------------------------------------------------------------
> ---
> Paul D. Robertson      "My statements in this message are personal
> opinions
> proberts () patriot net      which may have no basis whatsoever in fact."
> probertson () trusecure com Director of Risk Assessment TruSecure Corporation
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards