Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am looking for a smtp proxy to install on our gateway which should monitor outgoing smtp traffic to identify the source of recently occuring spam attacks from our network.

It would be enough if this could log all outgoing mails, no actual filtering must be done as I'm going to do this manually.

Also, is it possible to monitor smtps ports 465 and 587 or is it necessary to completely block these ports to stop spam?

share|improve this question

1 Answer 1

It's not necessary to block port 587 to stop spam.

As for monitoring, why do you want to monitor it? Block it instead. No system on your network should be sending outgoing mail on port 25 (or 465) other than your outgoing SMTP server.

Set up your egress firewall to reject any attempts to send outgoing mail from any other host, and to log such attempts so you know where they're coming from. This both solves the outgoing spam problem and lets you know where the problem is coming from.

See also: Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

share|improve this answer
    
Our users are sending emails from many different mailservers (not from our local one), using many different email clients. I suppose your idea won't work then? –  Zulakis Oct 11 '12 at 15:07
    
And you're allowing that?! –  Michael Hampton Oct 11 '12 at 15:07
    
Well, I can't do anything about that since I'm just there to help with the spam problem. I of course advised them to not allow it. Sorry if I didn't make that clear in my initial post. –  Zulakis Oct 11 '12 at 15:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.