Well, I don't notify on EVERYTHING that comes out, just the "common" ones
and only do it occasionally. Generally I try to educate my users, i.e.
"don't open any email you aren't expecting, and don't open any attachments
unless you are expecting them." Social engineering is the best way I've
found to avoid this sort of thing...
John
-----Original Message-----
From: Derek Harris [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 1:35 PM
To: Exchange Discussions
Subject: RE: Spoofing, Spam and Viruses
Exactly -- I don't even try to update users on most of the scams; I try
to block them when I become aware of them. It's pretty easy to write a
new rule using the characteristics of the message I'm trying to block,
and I have a few users who alert me quickly to the new ones they see.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Boyd,
Nathan
Sent: Tuesday, June 07, 2005 11:12 AM
To: Exchange Discussions
Subject: RE: Spoofing, Spam and Viruses
These phising scams now target small banks, credit unions and trust
accounts, not to mention the Paypal, EBay, individuals from third world
countries, long lost relatives etc. It would take an FTE to notify
everyone on every Spam, Virus, Spoof and Phising alert that came out,
which is why I am looking for an alternative. If we update thousands of
staff members every day on the status of the latest e-mail related scam
how long would they continue to read the notifications before discarding
them?
Nathan
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Aldrich
Sent: Tuesday, June 07, 2005 9:33 AM
To: Exchange Discussions
Subject: RE: Spoofing, Spam and Viruses
Whenever a new email exploit comes out with known features, I try to
send out an email blast to all my users advising them of the specifics
(i.e.
"Washington Mutual, and other banks do NOT send out emails asking you to
confirm your information..." etc. or "A new virus is being sent out via
email with the following characteristics in the email..."
John
-----Original Message-----
From: Boyd, Nathan [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 07, 2005 12:25 PM
To: Exchange Discussions
Subject: Spoofing, Spam and Viruses
Members of the list,
Do you currently publish statements regarding Spoofing, Spam, Phising
and Viruses to staff through your intranet or within a IT manual? I am
being asked on a daily basis to provide the same information on why some
spam messages get through, why undeliverable are returned when the
person did not send the message and asked to provide new information
when a new Phising e-mail gets through our Spam Gateway.
We currently are running all known solution for tackling this issue:
Trend IMSS at the gateway with Virus, Content and Postini Spam Solutions
(Known problem attachments are blocked at the gateway inbound and
outbound with virus checks both ways also), Exchange 2003 servers all
have ScanMail installed (known problem attachments are blocked) Exchange
2003 IMF on all Exchange Servers Outlook 2003 Officescan and
ServerProtect Trend Antivirus managed centrally with automatic updates
when they come through.
We currently block 10 out of 12 messages as Spam with a daily average of
60,000 inbound messages. The only thing left for me to do is send a
statement organization wide answering the management questions that are
currently asked daily regarding this issue.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
