We took a different tact here and it has meet with fantastic results. 

First, we outsourced our initial email services to SecurePipe. They are our
primary MX now on incoming emails. They generate a report every few hours to
every email address here at the office, giving them a listing of everything
that has been held up from the last notification message. They use RBL, DNS,
virus and spam filters that the user can adjust for their own Domain(s). 
Then we use Sybari Anti-gen on both the Front end SMTP server and within the
Exchange 2003 itself for anti-virus and some fine tweaks to the filters that
Secure Pipe can't do. 

What this has done for us is two fold.
First, it puts the responsibility of checking for false positives back on the
end user. They can add people to their white lists from the notification
message and release the message too. 

Second, we were able to reduce the need for more email power by letting them
take the hit on the primary filtering and just sending us a single message
per user's email address that can contain 1 to hundreds of blocked emails. 
This keeps us from having to do much but tweak the systems now and again, but
more importantly, it gives us back in IS more time to do other jobs instead
of constantly working on email problems. 

I do realize this isn't a fix for a lot of companies, but for small to mid
sized companies, this solution seems to be where the rest of the industry is
going because of the sheer size of the problem anymore. 

Oh, we are averaging about 500,000 emails a day at this point with very
little overhead.




    Felis demulcta mitis ...
Alan G. Monaghan 
   [ MCSE+I - Win4.0/ MCSE - Win2k/ BJCP # C0389(Recognized)  Ò¿Ó¬ ]
Systems Administrator 
Gardner Publications, Inc.

*Phone ...... 1-513-527-8867 
*Fax ........ 1-513-527-8801 
*Cell ....... 1-513-378-0919  
*E-mail ..... [EMAIL PROTECTED]
*URL ........ http://Bullwinkle.GardnerWeb.Com/



>> -----Original Message-----
>> From: [EMAIL PROTECTED] [mailto:bounce-
>> [EMAIL PROTECTED] On Behalf Of Aristotle Zoulas
>> Sent: Wednesday, December 13, 2006 8:29 AM
>> To: Exchange Discussions
>> Subject: any anti spam recommendations
>> 
>> Hello, We are running Exchange 2003 with a pair of front end GFI Anti
>> virus/Anti Spam  servers acting as SMTP relays. The GFI products really
>> are not enterprise grade. They are difficult to manage and have horrible
>> tech support. Furthermore, they do not perform as advertised. We are
>> looking for something much better. So far, we have looked at BrightMail
>> (seems to now be called SMTP Ver. 5) and the MacAfee appliance (Secure
>> Internet Gateway). We are looking for something that does not require
>> constant tweaking and maintenance; something that would give us much
>> better anti spam results. Our mail volume is anywhere from 500,000 to 1
>> million emails per day, of course 98% of which is----yes you guessed it
>> SPAM!
>> 
>> 
>> Any feedback from the list would be greatly appreciated.
>> 
>> 
>> 
>> 
>> Aristotle Zoulas
>> 
>> 
>> 
>> 
>> _________________________________________________________________
>> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>> Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
>> To subscribe: http://e-newsletters.internet.com/discussionlists.html/
>> To unsubscribe send a blank email to [EMAIL PROTECTED]
>> dl.sparklist.com
>> Exchange List admin:    [EMAIL PROTECTED]
>> To unsubscribe via postal mail, please contact us at:
>> Jupitermedia Corp.
>> Attn: Discussion List Management
>> 475 Park Avenue South
>> New York, NY 10016
>> 
>> Please include the email address which you have been contacted with.
>> 


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to