Scanning outbound mail?

[Gottschalk, David]

We filter all outbound email for this exact reason.

We had a really big problem with compromised accounts sending spam to the Internet. We'd then get blacklisted by a large number of domains, and it effected everyone.

Currently, we rarely get false positives for outbound spam. I consider this a better alternative than getting blacklisted by 20+ sites and RBLs.

David Gottschalk
Emory University
UTS Messaging Team

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Richard Lynch
Sent: Friday, February 10, 2012 8:41 AM
To: MailScanner discussion
Subject: Re: Scanning outbound mail?

John Wilcock wrote:
> Le 09/02/2012 17:44, Richard Lynch a écrit :
>> So, I'm trying to get a feel for what other sites do.  Do you use
>> MailScanner for outbound mail?  If so how do you handle messages that
>> are rejected?  Do you bounce it or just ignore it or what?
>
> I have things set up with rulesets, to bounce spam and to notify
> sender of virus/filename/filetype violations for outbound only.
>
> On my small site this has never posed any problems, though for larger
> sites you'd have to think about the volume implications if an internal
> sender managed to get infected with a spambot.
>
> John.
>
And this is the exact problem that has brought this question up.  We've had some users get infected and spew spam/phishing/etc out in mass through our outbound smtp gateway.  This caused the gateway to get blacklisted which impacted everyone.  So the question has come up about filtering outbound mail.  I don't know if it's a good idea or not.  I don't want to create a bunch of problems not thought of -- the cure being worse than the ailment!  What do your rulesets look like?

Thanks,
Rich

--

Obstacles are those frightening things we see when we take our eyes off our goal.

Henry Ford


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

________________________________

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).