I just rec'd the following ad from searchwin2000. I have not used the
product - so, don't know how well it works.
"I was one of the 750,000 SirCam victims. One employee let the virus
in by accessing his personal email account over the web. I had no
control then. But now I'm using SuperScout Web Filter to block access
to Hotmail, Yahoo...actually all web-based email sites. They say
SirCam may never go away, but it might if everyone was protected by
SuperScout." -Network Manager. FREE 30-Day Trial:
http://www.surfcontrol.com/promo/ZTTDN0926
-----Original Message-----
From: Hansen, Eric [mailto:[EMAIL PROTECTED]]
Posted At: 26 September 2001 18:18
Posted To: Exchange
Conversation: 3rd party emails
Subject: 3rd party emails
We got hit pretty hard by nimda last week. Our IIS servers were
patched,
and our Exchange servers were blocking EXE's. In that 20 something hour
window before Symantec released a DAT we thought we were secure. It
turns
out we got infected by a employee who had a 3rd party web based email
client, be it hotmail or sisna or whatever.
In a effort to stop all 3rd party email we have made it policy only
company
email is accepted in house. But it goes beyond that, it only takes one
employee screwing around to cause us a major problem. So my question is
how
can we effectively stop these 3rd party email web clients.
At first we thought to block all of them by IP at the router and
firewall,
but there are TONS of IP's to be blocked. So I had the thought as I was
making a change to a host file one day. Is there a way to make a change
to
our DNS server and tell it that for example all requests for
'www.hotmail.com' go to some IP in house?
Or is there a better way to do this?
E
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
