According to GFI, this will block all image attachements.--( -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nikki Peterson - OETX Sent: Thursday, December 14, 2006 12:12 PM To: Exchange Discussions Subject: RE: any anti spam recommendations
GFI Just sent me this, I have not tried it yet in my test world: GFI MailEssentials for Exchange/SMTP 12 http://kbase.gfi.com/showarticle.asp?id=KBID002909 Issue Encountered: A recent trend adopted by spammers is to include the spam message in an image. This may bypass the filtering done by the existing features in GFI MailEssentials. Solution: GFI has released the following patch for GFI MailEssentials in response to the above mentioned trend. This patch will help combat the on-going wave of image spam. Nikki Peterson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Eckelberry Sent: Thursday, December 14, 2006 9:40 AM To: Exchange Discussions Subject: RE: any anti spam recommendations Yes, you're right. But he has a point -- it _is_ utter nonsense to tell a customer to block all gif, tif, jpgs etc. to stop image spam is, which itself is throwing the baby out with the bathwater. I'm a bit surprised that an antispam vendor would have the temerity to actually tell this to a customer. Alex Eckelberry -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Scharff Sent: Wednesday, December 13, 2006 4:52 PM To: Exchange Discussions Subject: RE: any anti spam recommendations That's not the fault of Bayesian filtering. That's simply one tool in a toolbox of spam detection techniques a vendor should be using. You've confused the baby with the bathwater. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:bounce- > [EMAIL PROTECTED] On Behalf Of Aristotle Zoulas > Posted At: Wednesday, December 13, 2006 12:43 PM Posted To: swynk > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > Most of out spam come in the form of pictures, in other words the spam > text is embedded in the picture. The vendor told us the only way to > stop these is to block all picture files (gif, tif, jps, etc..) This > is utter nonsense. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jose > Manzano > Sent: Wednesday, December 13, 2006 1:19 PM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We use a Bayesian filter and works out well, but it's installed on the > client side.... > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ben > Schorr > Sent: Wednesday, December 13, 2006 12:59 PM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > Just because that filter hasn't worked out shouldn't discredit all such > filters. Bayesian filters, in general, are quite successful. > > Ben M. Schorr > Chief Executive Officer > ______________________________________________ > Roland Schorr & Tower > www.rolandschorr.com > [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Aristotle Zoulas > Sent: Wednesday, December 13, 2006 7:49 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We want to get a product that does not require training. We have fed > our Bayesian filter 100,000's of emails and it has learned nothing. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Discussions, Exchange (PHES) > Sent: Wednesday, December 13, 2006 11:08 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > We do. The Bayesian is the only one that requires training though. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Neil Doody Posted At: Wednesday, December 13, 2006 9:21 AM Posted To: > ExchangeDiscussions > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > > Bayesian is a small part of spamassassin, you should look into the > additional programs you can run along side it such as DCC/PYZOR and > RAZOR2 all have checksums of spam from online databases which vastly > improve spamassassin, I don't even bother to take Bayesian under > consideration and leave it train itself based on scores through the > additional programs. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Discussions, Exchange (PHES) > Sent: 13 December 2006 14:57 > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > That's the way we do it here. We also use Postfix with the LDAP > connector so that we can eliminate email not destined for a valid > mailbox before it hits SpamAssassin. My only complaint about this > method is the length of time it takes to train if you use the Bayesian > and the method for training leaves a lot to be desired (you have to > resend the message to a dedicated box on the SpamAssassin server. > > We are looking at Barracuda as a replacement next year personally. > > Bob R > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Jose Manzano Posted At: Wednesday, December 13, 2006 8:53 AM Posted > To: > ExchangeDiscussions > Conversation: any anti spam recommendations > Subject: RE: any anti spam recommendations > > > Hi Neil, > > > How does SpamAssassin work with the individual mailboxes? Does it > just tag a suspected Spam Email as Spam then you setup a rule in > outlook to move the message , or does it actually move/deletes the > message before it gets to the inbox? > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Neil > Doody > Sent: Wednesday, December 13, 2006 8:43 AM > To: Exchange Discussions > Subject: RE: any anti spam recommendations > > A unix based front end with spamassassin is good, you mention tech > support so if a work out of the box with no requirements for some level > of techno savvy configuration then it is probably not your best choice, > but it is a very good spam filter. > > Something that may be more useful for you is to look into greylisting > and SMTP banner delaying, greylisting says go away and come back later > to the first attempt of mail delivery then allows it in the second > attempt, SMTP banner delay just sets a delay before giving the 220 > ready for mail banner. > > Using both of these methods stops spammers who are looking for a quick > delivery and most wont come back to attempt a second delivery, stopping > the mail coming into your server in the first place. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Aristotle Zoulas > Sent: 13 December 2006 13:29 > To: Exchange Discussions > Subject: any anti spam recommendations > > Hello, We are running Exchange 2003 with a pair of front end GFI Anti > virus/Anti Spam servers acting as SMTP relays. The GFI products really > are not enterprise grade. They are difficult to manage and have > horrible tech support. Furthermore, they do not perform as advertised. > We are looking for something much better. So far, we have looked at BrightMail > (seems to now be called SMTP Ver. 5) and the MacAfee appliance (Secure > Internet Gateway). We are looking for something that does not require > constant tweaking and maintenance; something that would give us much > better anti spam results. Our mail volume is anywhere from 500,000 to 1 > million emails per day, of course 98% of which is----yes you guessed it > SPAM! > > Any feedback from the list would be greatly appreciated. > > Aristotle Zoulas _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
