RE: Blocking personal email

From: James B. Lawton <jblii(at)attbi.com>
Date: Fri Nov 29 2002 - 12:40:04 EST

There are definitely solutions other than blocking Hotmail, Yahoo Mail, etc. Nee cee mentions MIMEsweeper; more accurately he should have said WEBsweeper.
http://www.us.mimesweeper.com/products/msw/websweeper/default.asp This is an HTTP proxy that supports 3rd party AV products including most of the major vendors. We've been using it for about 6 months and it works fine, although it has taken some fine-tuning and there is a minor performance decrease on the client end. Scalability of this type of solution can be an issue if your organization is very large, or if you have multiple Internet access points. (We are about 1200 desktops) and have 2 Internet access points.

There are other gateway products that support antivirus scanning. I believe Symantec has one that is quite good.

JBLII -----Original Message-----
From: nee cee [mailto:nc@phat.co.nz]
Sent: Thursday, November 28, 2002 6:00 PM To: security-basics@securityfocus.com
Cc: iceburn@dangerzone.com
Subject: Re: Blocking personal email

With regards to the outlook mail you could perhaps look at a commercial content scanning products (there is probably open source around) like MailMarshall, Mail Essentials or MimeSweeper. I use the first one with a comand line virus scanner and have not had an email virus since i installed it. You may need to change email policies if blocking someones existing access.         

"Tim V - DZ " <iceburn@dangerzone.com>
28/11/2002 02:52 AM

Subject: Blocking personal email

In a company using the exchange / outlook combination is there any way to block users from using outlook to receive non-exchange mail? We are concerned about people adding their personal email to the Outlook accounts and subsequently being exposed to more viruses. The mail that goes through exchange is guaranteed to be scanned before it's viewed. I know that POP3 and SMTP can be blocked by ports, but what about services like HOTMAIL where outlook can use HTTP to retrieve mail? Is the only solution to block that site (making it so users can't see any hotmail pages in the browser either)?

Thanks,

-tim

---

Sign up for FREE email @ www.phat.co.nz and get your own @phat.co.nz address! muzic n' more @ http://www.muzic.net.nz

---

Select your own custom email address for FREE! Get you@yourchoice.com w/No Ads, 6MB, POP & more!
http://www.everyone.net/selectmail?campaign=tag Received on Fri Nov 29 17:55:51 2002