0

I am looking for a smtp proxy to install on our gateway which should monitor outgoing smtp traffic to identify the source of recently occuring spam attacks from our network.

It would be enough if this could log all outgoing mails, no actual filtering must be done as I'm going to do this manually.

Also, is it possible to monitor smtps ports 465 and 587 or is it necessary to completely block these ports to stop spam?

1 Answer 1

0

It's not necessary to block port 587 to stop spam.

As for monitoring, why do you want to monitor it? Block it instead. No system on your network should be sending outgoing mail on port 25 (or 465) other than your outgoing SMTP server.

Set up your egress firewall to reject any attempts to send outgoing mail from any other host, and to log such attempts so you know where they're coming from. This both solves the outgoing spam problem and lets you know where the problem is coming from.

See also: Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

3
  • Our users are sending emails from many different mailservers (not from our local one), using many different email clients. I suppose your idea won't work then?
    – Zulakis
    Oct 11, 2012 at 15:07
  • And you're allowing that?! Oct 11, 2012 at 15:07
  • Well, I can't do anything about that since I'm just there to help with the spam problem. I of course advised them to not allow it. Sorry if I didn't make that clear in my initial post.
    – Zulakis
    Oct 11, 2012 at 15:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.