Best Practice Detail

13-8-8905

Service Providers should encourage users to submit email via authenticated SMTP on port 587, requiring Transport Layer Security (TLS) or other appropriate methods to protect the username and password. In addition, Service Providers should restrict or otherwise control inbound and outbound connections from the network to port 25 (SMTP) of any other network, either uniformly or on a case by case basis, e.g., to authorized email servers.

Status: Rollover New

References/Comments: See the following document for more information: http://www.maawg.org/sites/maawg/files/news/MAAWG_Port25rec0511.pdf Note that the Best Practices in this grouping are primarily aimed at ISPs that provide service to consumer end-users on residential broadband networks, but may be applicable to other users and networks as well.

Historical events:

• Service Providers
• Internet/Data
• Cyber Security
• Information Protection
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII