Re: [fw-wiz] Securing email by inhibiting urls

Should have mentioned that this is a MS Exchange environment. Spam filters are MS based currently MS based but that’s up for grabs if we can replace them with something that provides the same functionality in place now. Currently using Brightmail and other than disabling/replacing urls in email it is working pretty good.

-----Original Message-----
From: Kurt Buff [mailto:kurt.buff@xxxxxxxxx]
Sent: Thursday, August 11, 2011 1:32 AM
To: chughes@xxxxxxx; Firewall Wizards Security Mailing List
Subject: Re: [fw-wiz] Securing email by inhibiting urls

mimedefang comes to mind.

http://mimedefang.org

On Mon, Aug 1, 2011 at 11:46, Chris <chughes@xxxxxxx> wrote:
A company I work for has been having great difficulty in securing against
email attacks. So far we have disabled access to webmail, implemented
rules and processes to block freemail services like hotmail etc until the
sender registers the address and of course a spam filter (BrightMail).
Attachment filtering is pretty strict as well.



The threat that presents the biggest challenge is url links in emails. The
common method of attack is an email from somedomain.com where they change
one character or otherwise make the address look valid (ie:
joe@xxxxxxxxxxxxxx or j0e@xxxxxxxxxxxxxx etc).



I was looking for a way to spot and block hyperlinks but it looks like the
only option I have is to filter on these and send them to a spam bin. I’d
rather yank the offending hyperlink and replace it with a message of some
sort. Unfortunately BrightMail doesn’t offer that capability.



Any products that do this or ideas on a solution?



Thanks

_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards



_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

Relevant Pages

  • Re: [fw-wiz] Securing email by inhibiting urls
    ... email attacks. ... sender registers the address and of course a spam filter. ... I was looking for a way to spot and block hyperlinks but it looks like the ...
    (Firewall-Wizards)
  • [fw-wiz] Securing email by inhibiting urls
    ... email attacks. ... sender registers the address and of course a spam filter. ... I was looking for a way to spot and block hyperlinks but it looks like the ...
    (Firewall-Wizards)
  • Re: [fw-wiz] Securing email by inhibiting urls
    ... rules and processes to block freemail services like hotmail etc until the ... sender registers the address and of course a spam filter. ... I was looking for a way to spot and block hyperlinks but it looks like the ...
    (Firewall-Wizards)