Educause Security Discussion mailing list archives

Re: Filtering outgoing email [MESSAGE NOT SCANNED]


From: "McClenon, Braden" <mcclenbw () ONEONTA EDU>
Date: Tue, 23 Jun 2009 15:13:25 -0400

Just out of curiosity, since I've considered proposing outbound scanning
with our Barracuda.  If the phishing message got through the Barracuda
when coming inbound, what makes you feel confident it will catch it, or
a reply to it, outbound?  This is why I always figured we'd need a
different solution to monitor outbound traffic. 

Brady McClenon
Senior Server Administrator
SUNY Oneonta
607-436-3203


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Charles Seitz
Sent: Tuesday, June 23, 2009 12:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Filtering outgoing email [MESSAGE NOT SCANNED]

We use a Barracuda appliance for both incoming and outgoing email. On
the
outgoing side it looks for scams, bulk mail, and malware. It also
scans
the
text of each message looking for SSN's and blocks those and alerts the
helpdesk so that they may take corrective action with the user. Repeat
offenders get a pleasant call from me. I don't know that I'd call this
an
inexpensive solution, but it has been quite effective and reliable -
far
more reliable than their web content filter.



Charles A. Seitz
Senior Security Analyst
University of Tennessee Information Security Office
Martin Campus
cseitz () tennessee edu
(731) 881-7966



On 6/23/09 7:00 AM, "Kellogg, Brian D." <bkellogg () SBU EDU> wrote:

We've been the victim of a phishing scam that made it through our
incoming spam filter.  The phisher used the compromised accounts to
send
spam via Outlook Web Access.  Just wondering what
inexpensive/reliable
methods others are using to filter outbound email and catch any
accounts
showing a huge volume of outbound spam.  Thanks...



Thank you,

Brian Kellogg
Network Services Manager
St. Bonaventure University
716-375-4092


Current thread: