limiting damage done by a compromised account

[Jason Ede]

Assuming you have some form of authentication for outgoing is that you can limit the from address for emails to that of the account. Also what about some form of rate limiting with alerting plugged in?


From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Sean M. Schipper
Sent: 24 January 2011 16:42
To: mailscanner at lists.mailscanner.info
Subject: limiting damage done by a compromised account

Hi,
I use Mailscanner ( v4.79 on RH Linux with spamassassin & Clam) in front of Exchange 2010.  Occasionally at our university we'll have a student email in their login credentials in response to phishing email that got thru.   We don't scan outgoing messages since I don't want to block outgoing emails except for this situation.  I'm looking for advice on what to do to protect us from being a source of spam.   We currently have a poor reputation on from senderbase which I've been unable to correct - any ideas on anything I can do to speed up this process would be welcome as well.

Thanks,
Sean
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110124/598b7fa6/attachment.html