0

I am looking for a smtp proxy to install on our gateway which should monitor outgoing smtp traffic to identify the source of recently occuring spam attacks from our network.

It would be enough if this could log all outgoing mails, no actual filtering must be done as I'm going to do this manually.

Also, is it possible to monitor smtps ports 465 and 587 or is it necessary to completely block these ports to stop spam?

Zulakis
  • 4,191
  • 14
  • 44
  • 75

1 Answers1

0

It's not necessary to block port 587 to stop spam.

As for monitoring, why do you want to monitor it? Block it instead. No system on your network should be sending outgoing mail on port 25 (or 465) other than your outgoing SMTP server.

Set up your egress firewall to reject any attempts to send outgoing mail from any other host, and to log such attempts so you know where they're coming from. This both solves the outgoing spam problem and lets you know where the problem is coming from.

See also: Fighting Spam - What can I do as an: Email Administrator, Domain Owner, or User?

Community
  • 1
Michael Hampton
  • 237,123
  • 42
  • 477
  • 940
  • Our users are sending emails from many different mailservers (not from our local one), using many different email clients. I suppose your idea won't work then? – Zulakis Oct 11 '12 at 15:07
  • And you're allowing that?! – Michael Hampton Oct 11 '12 at 15:07
  • Well, I can't do anything about that since I'm just there to help with the spam problem. I of course advised them to not allow it. Sorry if I didn't make that clear in my initial post. – Zulakis Oct 11 '12 at 15:17