Spam Email and Bandwidth Monitoring

1. Catherine Musyimi cmusyimi@strathmore.edu Spam Email and Bandwidth Monitoring Strathmore University – www.strathmore.edu Nairobi - Kenya

2. Overview • The network consist of 2 domains, Staff(400 pc’s) and students (600pcs). • Internet connection is through a fibre connection of uplink-512kbps and 2mbps downlink. • It is a switched environment with routing at the core. • It is a windows environment, Periphery computers are Linux boxes.

3. Strathmore University • Exchange 2000 on windows 2000 server, xp clients running outlook with Norton. • Linux Servers • Sendmail • MailScanner & Mailwatch • Spamassassin • ClamAV • MRTG Bandwidth Monitoring and graphing tool • rc.firewall • Optenet/squid

4. Mailscanner – What is it? • It is an e-mail security system deployed on your e-mail gateways. • It captures every known virus passing through your e-mail servers and identifies over 95% of all the spam in our email gateway.

5. How is email processed?

6. Output - Mailwatch

7. Output - Mailwatch

8. Output - Mailwatch

9. Lists • http://spamassassin.apache.org/tests_3_0_x.html • Identified spam: • Subject line is tagged so users can filter • easily • Message may be tagged, delivered, deleted, archived, bounced, encapsulated, notified and/or stripped to plain text

10. VIRUSES • Scans all e-mail passing through it for viruses using any combination of the supported anti-virus engines • ClamAV is free • Attachments containing viruses or other security problems are removed • All safe content is delivered untouched • Recipients and senders may get a warning explaining what happened and who they should contact for help • System admin notified of basic details of message and what viruses were found

11. MRTG & RRDTOOL

12. MRTG & RRDTOOL

13. Thanks …… Questions?