Yes, you're right. But he has a point -- it _is_ utter nonsense to tell a customer to block all gif, tif, jpgs etc. to stop image spam is, which itself is throwing the baby out with the bathwater. I'm a bit surprised that an antispam vendor would have the temerity to actually tell this to a customer.
Alex Eckelberry -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Scharff Sent: Wednesday, December 13, 2006 4:52 PM To: Exchange Discussions Subject: RE: any anti spam recommendations That's not the fault of Bayesian filtering. That's simply one tool in a toolbox of spam detection techniques a vendor should be using. You've confused the baby with the bathwater. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:bounce- > [EMAIL PROTECTED] On Behalf Of Aristotle Zoulas > Posted At: Wednesday, December 13, 2006 12:43 PM Posted To: swynk > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > Most of out spam come in the form of pictures, in other words the spam > text is embedded in the picture. The vendor told us the only way to > stop these is to block all picture files (gif, tif, jps, etc..) This > is utter nonsense. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jose > Manzano > Sent: Wednesday, December 13, 2006 1:19 PM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We use a Bayesian filter and works out well, but it's installed on the > client side.... > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ben > Schorr > Sent: Wednesday, December 13, 2006 12:59 PM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > Just because that filter hasn't worked out shouldn't discredit all such > filters. Bayesian filters, in general, are quite successful. > > Ben M. Schorr > Chief Executive Officer > ______________________________________________ > Roland Schorr & Tower > www.rolandschorr.com > [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Aristotle Zoulas > Sent: Wednesday, December 13, 2006 7:49 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We want to get a product that does not require training. We have fed > our Bayesian filter 100,000's of emails and it has learned nothing. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Discussions, Exchange (PHES) > Sent: Wednesday, December 13, 2006 11:08 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We do. The Bayesian is the only one that requires training though. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Neil Doody Posted At: Wednesday, December 13, 2006 9:21 AM Posted To: > ExchangeDiscussions > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > > Bayesian is a small part of spamassassin, you should look into the > additional programs you can run along side it such as DCC/PYZOR and > RAZOR2 all have checksums of spam from online databases which vastly > improve spamassassin, I don't even bother to take Bayesian under > consideration and leave it train itself based on scores through the > additional programs. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Discussions, Exchange (PHES) > Sent: 13 December 2006 14:57 > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > That's the way we do it here. We also use Postfix with the LDAP > connector so that we can eliminate email not destined for a valid > mailbox before it hits SpamAssassin. My only complaint about this > method is the length of time it takes to train if you use the Bayesian > and the method for training leaves a lot to be desired (you have to > resend the message to a dedicated box on the SpamAssassin server. > > We are looking at Barracuda as a replacement next year personally. > > Bob R > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Jose Manzano Posted At: Wednesday, December 13, 2006 8:53 AM Posted > To: > ExchangeDiscussions > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > > Hi Neil, > > > How does SpamAssassin work with the individual mailboxes? Does it > just tag a suspected Spam Email as Spam then you setup a rule in > outlook to move the message , or does it actually move/deletes the > message before it gets to the inbox? > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Neil > Doody > Sent: Wednesday, December 13, 2006 8:43 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > A unix based front end with spamassassin is good, you mention tech > support so if a work out of the box with no requirements for some level > of techno savvy configuration then it is probably not your best choice, > but it is a very good spam filter. > > Something that may be more useful for you is to look into greylisting > and SMTP banner delaying, greylisting says go away and come back later > to the first attempt of mail delivery then allows it in the second > attempt, SMTP banner delay just sets a delay before giving the 220 > ready for mail banner. > > Using both of these methods stops spammers who are looking for a quick > delivery and most wont come back to attempt a second delivery, stopping > the mail coming into your server in the first place. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Aristotle Zoulas > Sent: 13 December 2006 13:29 > To: Exchange Discussions > Subject: any anti spam recommendations > > Hello, We are running Exchange 2003 with a pair of front end GFI Anti > virus/Anti Spam servers acting as SMTP relays. The GFI products really > are not enterprise grade. They are difficult to manage and have > horrible tech support. Furthermore, they do not perform as advertised. > We are looking for something much better. So far, we have looked at BrightMail > (seems to now be called SMTP Ver. 5) and the MacAfee appliance (Secure > Internet Gateway). We are looking for something that does not require > constant tweaking and maintenance; something that would give us much > better anti spam results. Our mail volume is anywhere from 500,000 to 1 > million emails per day, of course 98% of which is----yes you guessed it > SPAM! > > > Any feedback from the list would be greatly appreciated. > > > > > Aristotle Zoulas > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > Remploy - 60 years of finding jobs for disabled people > http://www.remploy.co.uk http://www.realjobs4realpeople.co.uk > ***************************************************************** > IMPORTANT NOTICE: This e-mail is confidential, may be legally > privileged, and is for the intended recipient only. Access, disclosure, > copying, distribution or reliance on any of it by anyone else is > prohibited and may be a criminal offence. Please delete if obtained in > error and e-mail confirmation to the sender. > > Remploy has taken reasonable precautions to ensure that any attachment > to this email has been scanned for viruses. However, we cannot accept > liability for any damage sustained as a result of software viruses and > recommend that you carry out your own virus checks before opening any > attachments attached to this email. > > No one other than a properly authorised person made known to you in > writing can create a binding obligation on behalf of Remploy by virtue > of this email or any other means. > *************************************************************** > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > Remploy - 60 years of finding jobs for disabled people > http://www.remploy.co.uk http://www.realjobs4realpeople.co.uk > ***************************************************************** > IMPORTANT NOTICE: This e-mail is confidential, may be legally > privileged, and is for the intended recipient only. Access, disclosure, > copying, distribution or reliance on any of it by anyone else is > prohibited and may be a criminal offence. Please delete if obtained in > error and e-mail confirmation to the sender. > > Remploy has taken reasonable precautions to ensure that any attachment > to this email has been scanned for viruses. However, we cannot accept > liability for any damage sustained as a result of software viruses and > recommend that you carry out your own virus checks before opening any > attachments attached to this email. > > No one other than a properly authorised person made known to you in > writing can create a binding obligation on behalf of Remploy by virtue > of this email or any other means. > *************************************************************** > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to [EMAIL PROTECTED] > dl.sparklist.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
