PIX IDS Spam prevention

[r-lemaster]

Some firewalls (like Raptor) have a feature that will check incoming mail IP/Domain to make sure that the sender's domain name can be reached (reverse path) via the sender's IP address. This prevents spammers from sending mail to your mail server with forged addresses. Can PIX do this? How about checking sending IPs against Black Hole lists? That would be cool. And nachos. Nachos are cool, too.

[mostiguy · Accepted solution]

Nope, the pix doesn't offer either of those.

IMHO those functions are best achieved at the email server level - that way email administrators are more fully responsible for reception and delivery of email throughout the org and to the 'net, rather than splitting responsiblities between security staff and email admins