Re: the importance of security

[Gary Flynn <flynngn () JMU EDU>]

Jon Mitchiner wrote:

> I am not comfortable with the idea of port 25 blocking.  The reason is
> because how will you know if a machine is infected or not?  If you block
> outgoing port 25 then it's going to make it difficult for you to know
> whether a machine is infected with a trojan/virus/etc and you would have
> compromised machines on your network.

access-list 120 deny tcp any any eq 25 log

Then check your logs. :)

Similar logging for port 135 and 445 access attempts
is also illuminating although they can be 'permit'
rules as policy dictates.

--
Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.