[Mimedefang] OT: control internal spam

[Matthew.van.Eerde at hbinc.com]

mimedefang-bounces at lists.roaringpenguin.com wrote:
> --On Tuesday, May 03, 2005 3:26 PM -0700 Matthew.van.Eerde at hbinc.com
> wrote: 
> 
>> Then when you catch someone sending spam you know which account to
>> disable.
> 
> But note that that won't handle a trojan'd system, because the damage
> will already be done. Rate limiting can reduce the damage
> substantially. 

Usually a trojan'd system will send using its own SMTP engine, which the OP said was firewalled off.

A minority of trojan'd systems will automate Outlook - true, the policy I describe will not catch these systems.

A minority of trojan'd systems will read the mail settings from Outlook, and send to the SMTP server described therein.  The policy I describe WILL catch these systems, because they will (hopefully) be unable to decrypt the stored password.

Matthew.van.Eerde (at) hbinc.com                 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com         Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"