[125307] in North American Network Operators' Group
Re: Carrier class email security recommendation
daemon@ATHENA.MIT.EDU (todd glassey)
Mon Apr 12 10:09:25 2010
Date: Mon, 12 Apr 2010 07:09:12 -0700
From: todd glassey <tglassey@earthlink.net>
To: nanog@nanog.org
In-Reply-To: <1271065747.2453.26.camel@akamiru>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This is a multi-part message in MIME format.
--------------040605030909080200060807
Content-Type: text/plain; charset=ISO-8859-9
Content-Transfer-Encoding: 7bit
On 4/12/2010 2:49 AM, Alex Kamiru wrote:
> I am in the process of sourcing for a carrier class email security
> solution that will replace our current edge spam gateways based on open
> source solutions. Some solutions that am currently considering are
> Ironport, Fortinet Fortimail, MailFoundry and Barracuda. I'd therefore
> wish to know, based on your experiences, what works for you
> satisfactorily.
> Areas that are key for me are centralized management and
> reporting, carrier class performance, per mailbox policy and quarantine,
> and favourable licensing for an MSSP. I know Ironport is rated highly in
> this space but I find its per user licensing is not favourable for a
> MSSP.
On the other hand installing a FreeBSD system with QMail/Procmail and/or
PostFIX for the other stuff is a no-brainer especially with a Webmin
Management front end.
>
> Regards,
> Alex.
>
Alex there are many email systems out there - but make sure that
whatever you buy can support NTPv4 and not SNTP or unauthenticated NTP
since this is how the GW is going to be able to put time-marks on
receipts which must have legal authority.
So that means any appliance system provider must have at least NTPv4
tested with both Autokey and symmetric-key and the new interface
specific ACL's in the 4.2.6 versions of NTP. Further the issues of the
ECC/Parity memory become important here because time is moved over UDP
and is subject to single-bit errors all over the place.
Todd Glassey
>
>
>
>
--------------040605030909080200060807
Content-Type: text/x-vcard; charset=utf-8;
name="tglassey.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="tglassey.vcf"
begin:vcard
fn:Todd Glassey
n:Glassey;Todd
email;internet:TGlassey@Earthlink.NET
x-mozilla-html:FALSE
version:2.1
end:vcard
--------------040605030909080200060807--
