Re: Does anyone know how Verizon's outbound, external mail (port 587) is going to work?

[Gary Dobbins <dobbins () ND EDU>]

Seconding that. It's how we've operated the campus net border (WRT mail) for some time.  It's a good idea, IMO.

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Brad Judy
> Sent: Thursday, September 24, 2009 8:56 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Does anyone know how Verizon's outbound,
> external mail (port 587) is going to work?
>
> This is a pretty common ISP practice.  I think Comcast and others
> already
> block outbound 25 and require customers to either send mail through
> their
> servers or use an alternate mechanism (webmail, port 587, etc).  To
> my
> knowledge, none do port translation from 25 to 587, the end-users
> must
> adjust their clients if they wish to use 587.
>
> It helps with certain types of spam, but not everything.
> Approaches like
> this are what have pushed spammers to attacking the email client
> itself,
> typically webmail client via phished accounts.
>
> If anything, Verizon is kind of late to the game with this
> protection step.
>
>
> Brad Judy
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Peter
> Charbonneau
> Sent: Thursday, September 24, 2009 8:17 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Does anyone know how Verizon's outbound,
> external mail
> (port 587) is going to work?
>
> Good morning,
>
>    I just read Verizon's "letter to the community" about blocking
> outbound port 25 in order to decrease SPAM egressing their network.
>
> hxxp colon slash slash www dot verizon dot net slash port25
>
>
>    I am wondering exactly how this is going to work.  Do we punch
> holes in our firewalls to allow tcp port 587 inbound to our mail
> networks, or is Verizon going to port translate destination port
> 587
> IN their network to port 25 as it leaves?  I have tried to talk to
> Verizon tech support, but I either get "What?!?" or "It's all
> explained in the document".  When I ask to talk to a supervisor,
> they
> are unavailable.
>
>    Does anyone here know?
>
> PeteC
>
>
> Peter Charbonneau
> Sr. Network and Systems Administrator
> Williams College
> (413) 597-3408 (office)
> (413) 822-2922 (cell)
> OIT will NEVER ask for your password!