Discussion Locked

Spam gateways?

0 helpful
16 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What are you guys using to block spam from hitting the Exchange box? Using a particular software and method?

16 replies

by house

We use the MailDaemon software from Alt-N technologies. They offer a proprietary spam filter that is somewhat intelligent. It takes a little bit of manual work once in a while, but other than that, it is pretty self-sufficient.

Sorry, I guess that didn't really answer your question. I'm just offering an alternative and opening up the discussion a little bit.

http://www.altn.com/

Chris

by tbragsda

.
But for others I have been singing the praises of GWGardian for GroupWise. For anyone out there with GW looking check out Messaging Architecs. Im also using their GWAnywhere, GWArchive. Great all.

by choppit

I've been really impressed with it. It took around 2 weeks to prime the database but after that our spam problem practically disappeared. I'm not sure how well it scales though as it's only processing around 700 mails a day (75% spam).

One of the features I like about this is it's ability to reject mail without having to accept the whole message for scanning. As an added bonus this also rejects around 90% of our email borne viruses, presumably because they have spam like characteristics.

I'd say give it a try, running in test mode to see how it fares.

by house

We have an address spoofing detection mechanism that works wonderful, but it acts up with our clients who are going through a proxy (usually without their knowledge). It is usually spyware related on our client's end, so it extends such tech calls a little bit further than we'd like.

by house

I'm simply commenting on spam filtering techniques in general. We use the Mail Daemon from Alt-N. One of the latest additions was an intelligent spoofing detection feature that is bringing about more support calls than it's worth.

We've had an intelligent points based system for a while, but this additional method queries the source of the mail in order to authenticate (term used loosely) the piece of mail. We've come to the relization that any of our clients who are infected with spyware scam software, such as "download accelerators" and proxy based security tools, are being rejected. Keep in mind that we are an ISP, so you can just imagine the crap that our clients are infected with.

by roger99a

I use Syamntec's SMTP Gateway software. It's not great at filtering spam though. It relies on DNSBL's, keywords and return addresses for blocking. I had to set up an internal DNSBL to make it really effective and it ate a large portion of my life. It is very good at stopping viruses and blocking attachments. The AV on the mail server goes for months without a positive detection.

by info

With the Messagelabs service we are able to scan all out mail for virus and spam before it hits any of our infrastructure. We reduce the load on our mailservers, while any spam is quarantined at Messagelabs. So if you are having difficulty just dealing with the amount of mail. You can easy have it quarantined a level before delivery to your Exchange Server.

by house

That is one of the greatest ideas I have ever seen in my life. Who are these guys and where did they they think of that one?

I will read more into the service that they offer.

Do I have this correct? You can log into your account with them in order to view your quarantined mail? Can you adjust the filter levels accordingly for your account?

by choppit

It's a great idea in theory, and companies have been offering this type of service for AV for a number of years. Two areas for consideration though..

1) Your mail is 'seen' by another party.
2) You add an extra potential point of failure in your mail route.

by house

I don't think that I would jump into something like that, but for mail that is considered a means for...

1) general info
2) support
3) suggestions
4) testimonial

...this is the sort of mail that could be routed through. Many companies post open addresses for public communication; these addresses can get saturated pretty fast with spam mail.

I don't know that I'd impliment this myself, but I would be something to recommend to others who ask.

by juancho.ciocon

We've implemented a dual layer of protection: in the DMZ perimeter with Mirapoint gateways and in the network using NetIQ's MailMarshal for SMTP.

Both work very well.

Regards,
-Juancho

by juancho.ciocon

We've implemented a dual layer of protection: in the DMZ perimeter with Mirapoint gateways and in the network using NetIQ's MailMarshal for SMTP.

Both work very well.

Regards,
-Juancho

This discussion is closed to new replies.