- To: Mary Gardiner <mary@xxxxxxxxxxxx>, slug@xxxxxxxxxxx
- Subject: Re: [SLUG] Re: Sending mail from within a highly locked down network
- From: Glen Turner <gdt@xxxxxxxxx>
- Date: Mon, 21 Apr 2008 20:06:14 +0930
- Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAALVBMVEV8hICwZ1odCw7OiXlO ODMEBAvgy8WynJtXR2ZLIy+SWk2yeGL///8fHyx4QDQ69jxnAAACY0lEQVQ4jY3TMWsbMRQAYA8l 9pDlyHa3iXjIkMHc0MFQKGjwmZ6nHu2SrTS0eEip6ZW0gQyldaGB1tyiIYGb0jyXg+OGwAlCh2IH 4qGYmsTQGwJarIJ+QyXbyclNC32jPj1JT08qDP4Rhf+B3t+hv5dlF8Wb8HLoqTj/A3p73jyWF6E1 uoKHC9DPyl5ZDZevU2bwbVhGSMnGyHugww5CY4JUDL2NpgYuGgc46AynaT9z6LtrgRAN5uwj5M3X msJpRgSAABeplPs5PBkLMC0wjtBUmtfQqgNYNKSGQ9B62Xt9DbfqZphUEpuaYj8bzSqZQRiv3H5u 21UzcvYzLaPUTWwV1FCQaRlziI0IL0DrCsyIZVmWL/XIoleAF+DUAOjKMzHByDj7kcPXlANP4khe yjrJah/yu0qB8ZVKgwVsGLgXGtDwc2jf+WTBBBP3/Zd8qaRKLfvkLjU5sHYn3+NM3kZSPeE2pTBp rw10kGVLsCvRpLSqNUqVITMSO46c0vdFqCYnQgIj7Xs3wPllpxKWc+hZNI7DI3RpmROyqz+fMO5S 0w14aDrkrQ5pCqEFEeOASVGHbSuuhyZDl2mACzo8pTQ+phE30oNaSYe+hJUK8DBt1N680KDXpVQ2 nEMkanqjBoNnEmIAub+L1s81OLMkmCCE00HehQb9kCYxRBg78o3uarAJNJE9J5iQzmppOQcfuqoX ErDzsfQuP9UrDiZEDnYOBDtsF5tzeOxv10EwjHHAQWwViksz2PT9nUu1M3YaHA63fL+goOfL2OrK HyVFhMaxgqVBYTru+1QVIYT8P9N5xeZvAufMcHaieZQAAAAASUVORK5CYII=
- Openpgp: url=http://www.gdt.id.au/~gdt/gdt.gdt.id.au.pubkey.asc
- User-agent: Thunderbird 2.0.0.12 (X11/20080226)
Mary Gardiner wrote:
Everyone's solutions have been pretty interesting[1]. I'm surprised
(although, yes, I knew) that there aren't less sysadmin-y solutions:
blocking outgoing SMTP is getting pretty common.
Networks *should* block outgoing SMTP from anything but authorised
mail servers. They should, however, allow IMAPS (993) and
Authenticated SMTP (587 to allow users to exchange mail with third-party
servers.
In this day and age mail servers shouldn't relay unauthenticated mail
from within a network to the outside. That's just asking for one
infected PC to drop the entire domain into a spam blacklist.
--
Glen Turner
SLUG Mailing List Archives