HOME Calendar Join / Renew PC Alamode About Us HELP Sponsors
Reviews Columns Features Theme Issues   Archives Other  


 Comm Corner

Computers and Security
Outlook E-mail Security
Part Four

John Woody is a net working communications consultant specializing in small office, home office networks, training setup, and internet connectivity.

Michael Espinoza is owner of Technology Coaching, a training and consulting firm that specializes in the PDA market. He co-chairs the PDA SIG with John Woody.


This is the fourth column in the series concerning basic computer security.  The first three columns were directed at the Windows OS (Operating System) settings that can be executed in the Windows XP Pro OS.  In this column, we will explore some of the security settings that are available in the Microsoft Office Outlook program manager Outlook. One of the primary areas that Outlook or Outlook Express can offer is in the filtering of unwanted e-mail.  Another area is the <Settings> window in <Personal Folders>.  For example, a right click on the Personal Folders in the All Mail sub-section to choose <Properties> opens a window that changes can be made to the properties.  The folder can be renamed, sized, and set for easy reading by showing all the items in the folder or only the unread items.  These settings are made on the <General Tab>.  The <Advanced> button at the bottom of the <General> tab opens a new window where the Personal Folders can be passworded and compressed with encryption.  We will look at more of the settings that can be made in Outlook later in this column.

But first, we need to cover some of the general areas about e-mail managers and rehash, no, re-enforce our understanding of the role of filters, blocks, and general knowledge of protection for e-mail.  I can not emphasize enough the importance of a good anti-virus utility for one=s computer.  Remember my earlier discussions about open connections in broadband, high performance computers that are not protected, and how the unauthorized users want to use that unprotected computer.

Filters and blocks work to keep the spam e-mail controlled.  Filters and blocks will not keep viruses out like anti-virus programs, but will funnel the unwanted e-mail into a controlled sub-folder where it can be reviewed or deleted at will.  The filters route the unwanted e-mail to a specific folder where it can be observed unopened to determine what to do with it.

General Protection
Indulge me once more about broadband open connections and high performance computers.  In the days of dial-up, the hackers avoided real attacks on most individuals because it was too hard to make a connection and get anything back through the dial-up connection.  When the dial-up session was finished, the connection went away.  In dial-up, the IP address was different each time a user was on line.  The hackers were generally too lazy to really try attacks on dial-up.  And, since the computers were not really high performance enough to use, the hackers left dial-up alone.  Dial-up was usually not fast enough to use to gain addresses or to do denial of service attacks.  Since the dial-up was short term and dynamic (PPP (Point-to Point Presence)), the Internet connection was not accessible unless the IP address was known.  And, as personal use computers were not powerful enough to really be of use, hackers went after the corporate networks.  So, the hackers tended to go after openings in business network systems, where they could really do damage.

With the advent of broadband connections, either Direct Cable or DSL phone lines, with open bandwidth, coupled with computer power to do things, personal use computers became a prime target for hackers.  Personal-use computers were an easy target; most users are not up on security, and, as most users were using Microsoft OS. The attack was easy to pull off.  Remember that an open connection is on all the time, making the computer vulnerable to unauthorized use.  The bandwidth of broadband was also very useful to the hackers as a lot of unauthorized use could be accomplished in a short period of time via the relatively powerful computer.

 Some theft of personal information may be the goal of hackers against personal use computers, but the real need is the e-mail address books that are part of the personal e-mail utilities. Especially since most personal use computers are completely or partially unprotected.   A successful attack that captures 300 to 500 good e-mail addresses in a short period of time, and then sends the virus to all of the new addresses makes a Denial of Service attack an easy thing to do.  Or, to capture the addresses for sale to a pornographic or other spam-related site is easy money.

Most personal-use computer users are not experts on computer security or network security, and are not knowledgeable of the Microsoft OS to keep it up to date concerning security.  This is a deadly combination when coupled to the above open broadband bandwidth.  And, the security knowledge base is not coordinated or done in terms that allow non-experts can make good use of it.

Of course, the Microsoft OS systems did not take security seriously until very late in the game.  The various Windows OS=s systems were written for easy use by the lowest dominator, the un-informed personal user.  Market domination at the expense of its very user base seemed to be the number one goal for Microsoft for many years.  Only when the corporate user base rebelled because of costly unauthorized hacker attacks, did Microsoft really take security seriously.

The best defense in an e-mail program is an understanding of filters and blocks.  This is in addition to a good anti-virus program, and, hard or software firewall, of course.

Filters and Blocks
Filters are rules that the e-mail program can execute to determine if the contents of any e-mail has the characteristics that the rule is looking for.  Filters can be used for many things such as address sorting or gathering all the e-mail from a project together in addition to keeping unwanted e-mail controlled.  View filters make it easy to see only those items or files stored in the Outlook folders that meet the conditions that the rules specify.  Filters generally place like files together.  Exercise the view filters by highlighting the Outlook folder you want to apply the filter to and move the cursor to the <View> Menu and point to the <Arrange By>, then click on <Custom>.  Click <Filter>, and select the filter options wanted.  Additional criteria for the filter can be added by clicking the <More Choices> tab to select the additional options.  Blocks are used to keep files from even getting into the e-mail program.

In past versions of Outlook, rules were made to catch all the variations that could be in the subject or body of the e-mail. These rules made up the filters that looked at the incoming e-mail and determined if the e-mail was unwanted.  The rules were very specific as to words and character sets to be recognized.  It was almost impossible to include all the characters and symbols that were placed in the e-mail.  These rules made up the filter to keep the unwanted e-mail out, but had to be very specific about the characters and symbols that were to be looked at in the filter.  The pornographic and loan spamers have become really good at placing unfamiliar characters in the subject lines and body of their spam e-mail to confuse these rules.

 In Outlook 2003, Microsoft has replaced the specific rule assignment that was used in previous versions as filters and added a new set of features that automatically look at the incoming e-mail to filter the Junk e-mail out.  The specific rules have been replaced with a set of software utilities that look at incoming e-mail and determine if it is spam.  The Junk E-mail Filter is turned on by default, set to Low.  The setting can be made to be able to cull everything but allowed e-mail.  Microsoft has begun to employ the security features at installation, a new thing.  There are several setting levels that become progressively more aggressive to the point of catching good e-mail as well.  The captured e-mail is sent to a Junk E-mail folder.  This filter has two parts, Junk E-mail Lists and a state-of-the-art evaluation technology that looks at the content and structure of the e-mail.  This feature can be exercised from two locations Outlook 2003, the <Actions> pull-down menu, select <Junk E-mail>, then select <Junk E-mail Options> which opens a window with four tabs, <Options>, <Safe Senders List>, <Safe Recipients List>, and <Blocked Senders List>.  The Options Tab sets the general level of filtering from No Automatic Filtering to Safe Lists Only in four radio buttons.  The default is Low.  A check box is included to Permanently delete junk e-mail from the Junk E-mail folder.  The second tab is the Safe Senders List and contains domain names and e-mail addresses that you want to receive e-mail from.  This list (and the other two) is blank to start with and uses <Add>, <Edit>, and <Remove> buttons to fill out.  A check box at the bottom includes the Contacts address book e-mail addresses by default.  The third tab is the Safe Recipients List and contains the domain names and e-mail addresses of mailing lists that you belong to.  It is added or edited as the Safe Senders tab is done.  The fourth tab contains the Blocked Senders List.  E-mail addresses or domain names on this list will always be treated as junk or spam.  Again, this list is blank to start with and is developed by using the Add or Edit buttons.  All three lists are also added to by using the Right Mouse button to open the pull-down menu on any incoming e-mail that you do not want to retain.  This action opens the three choices, Blocked Senders, Safe Senders, or Safe Recipients Lists.  This is the easiest way to add to the lists.

Since the Contacts Address book addresses are considered safe by default, the main list to be concerned with is the Blocked Senders List.  For example, I have my Options Tab set to Low, which allows some unwanted e-mail to not be automatically sent to the Junk E-mail Folder.  I highlight on each new incoming e-mail, then preview it in the right panel preview column to determine if I want to keep it.  Upon determining that the highlighted e-mail is junk, I right click it and select the Junk E-mail pull-down menu selection, usually <Add Sender to Blocked E-mail List>.  This action adds the e-mail address to the blocked list from now on.  This is the safest way to build a Blocked E-mail list.

From time to time, I review the Blocked E-mail List to see if there are duplicate addresses or domains.  I usually find duplicate domains.  If these domains are unique, i.e., not main stream like aol.com, some .org, and .com addresses, or comcast.com, I edit them to make the domain a junk address.  Be very careful in this editing as you can route good addresses to the junk folder.  I leave the mainstream addresses in their full e-mail address form to keep them in the junk mail folder. It may be a good idea to not edit any of the e-mail addresses until you are really comfortable with the Blocked Senders List.

Conclusion
The current versions of Outlook and Outlook Express have the ability to limit much of the unwanted e-mail that we all receive today.  Especially, Outlook 2003, which has advanced filtering utilities built-in.  We all need to be familiar with the these security settings to get the most from our e-mail.


Copyright© 1996-2008
Alamo PC Organization, Inc.
San Antonio, TX USA