[unisog] Any Canadian Universities on here ?

Paul Ryan pryan at rogers.wave.ca
Mon May 2 20:11:03 GMT 2005


Thanks to all the replies - this gives me good idea from an ISP
persepctive - to tally the responses - the only schools I haven't heard from
are in Ottawa ....

regards,

Paul Ryan

-----Original Message-----
From: unisog-bounces at lists.sans.org
[mailto:unisog-bounces at lists.sans.org]On Behalf Of Sylvain Robitaille
Sent: Monday, May 02, 2005 3:56 PM
To: UNIversity Security Operations Group
Subject: Re: [unisog] Any Canadian Universities on here ?



On Mon, 2 May 2005, Paul Ryan wrote:

> just trying to gauge the # of Canadian edu institutions on this list ?

Concordia here ...  I'll answer the next question right away, since I've
already seen it:

We permit outbound port 25 traffic only from specific mail servers,
mostly in the central IT department, and a few in one of our faculties,
where there is a large segment of full-time IT staff taking care of them.
Inbound port 25 is also permitted only to the same mail servers.

We blocked general inbound port 25 a few years ago, and outbound last
summer.  The inbound block has no impact on our users: we provide MX
records pointing to our mail servers, and they're suitably configured
to forward messages to the receiving hosts.  For the outbound block, it
only required a small transition period before all users were correctly
configured to have their email software use one of our mail servers as
a relay, via a CNAME which permits us to easily change which server they
use when maintenance is required.

A few internal organizations, departments, student clubs, etc. feel
a need to run their own mail servers.  These are permitted, so long as
they SMART_HOST outbound mail through our mail servers and it's understood
that inbound mail will be MXed through our mail servers.  No one has given
us grief over that, as it seems most people understand the value in it.

--
----------------------------------------------------------------------
Sylvain Robitaille                              syl at alcor.concordia.ca

Systems analyst / Postmaster                      Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------

_______________________________________________
unisog mailing list
unisog at lists.sans.org
http://www.dshield.org/mailman/listinfo/unisog



More information about the unisog mailing list