RE: Block a user's outgoing email

[larry_birch () dofasco ca]

I believe that within Exchange 5.5 administrator go to the user's Limit tab and set the outgoing message size to 0 
(likely it is currently set to no limit).  But the previous email makes a great point.

-----Original Message-----
From: Kryptos [mailto:kryptos () phreaker net]
Sent: Wednesday, August 27, 2003 3:16 PM
To: Cesar Diaz; security-basics () securityfocus com
Subject: Re: Block a user's outgoing email


Although redirecting the user's outgoing mail to your security department
would work for Outlook, you should also consider that the user may use
webmail on a service such as Yahoo!, or they may use an instant messaging
application.  You should consider these as security violations as well.  If
you're logging the user's e-mail in an attempt to gather evidence of NDA
violations, you might consider a keylogger or similar application to catch
all the activity on the computer.

--
Kryptos
kryptos () phreaker net
925.955.8110

----- Original Message ----- 

From: "Cesar Diaz" <cesadiz () yahoo com>
To: <security-basics () securityfocus com>
Sent: Wednesday, August 27, 2003 7:48 AM
Subject: Block a user's outgoing email


:
:
: I have situation where I want a user to be able to receive emails, but not
: to send them.    We run Exchange 5.5 and the clients use Outlook 2000.
: This particular user is remote, so they connect through a Contivity VPN
: client to our network.
:
: I don't want the user to know that outgoing emails are being blocked and
: we want to be able to read them for secuirity policy violations.
:
: Any suggestions?  Thanks in advance.
:
:
:
:
: --------------------------------------------------------------------------
-
: Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
: October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
: technical IT security event.  Modeled after the famous Black Hat event in
: Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
: Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
: --------------------------------------------------------------------------
--
:


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.512 / Virus Database: 309 - Release Date: 8/19/2003

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------