[unisog] Any Canadian Universities on here ?
cjf at calfrye.com
Thu May 5 19:04:01 GMT 2005
Well, both approaches work, but if outgoing mail is routed through a gateway
server of some sort, throttles and other measures can be employed in addition to
watching the logs...
--Cal Frye, Network Administrator, Oberlin College
GnuPG ID 43061C16, Public key http://www.calfrye.com/cfrye.asc
"Marriage is socialism among two people." -- Barbara Ehrenreich.
Peter Van Epp wrote:
> On Thu, May 05, 2005 at 11:25:26AM -0500, PaulFM wrote:
>>So you would have caught it just as fast had you logged all outgoing port
>>25 connections rather than block them.
> This is what I am doing (which may be a case where argus tells me too
> much though :-)). We have inbound 25 restricted to our mail servers only, but
> outbound is currently not blocked. Argus tells me that a fairly wide variety
> of our machines send a small (but non zero) number of messages directly rather
> than through our mail server (as they should be).
More information about the unisog