One thing to keep in mind with spam defense in general is that you need to block it at the first point of contact with your network - once your server accepts the mail for delivery, all you're doing is automating the "hit the delete key" process your users are currently using.
The only effective way to get off spam lists is to reject the message before the DATA verb happens, or at the very least before the 250 response to the end of data stream. I haven't looked at commercial systems to do this, as we have run various Unix boxen with either smtpd from Obtuse Systems or the recent versions of sendmail (8.12.x) and use the SpamCop RBL[1]. In either case, I'd say we see 95%+ of inbound spam blocked. Roger ------------------------------------------------------ Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA [1] Which provides full explainations of exactly what (including full text of email) got them on the list. > -----Original Message----- > From: Ed Crowley [mailto:curspice@;pacbell.net] > Sent: Thursday, October 10, 2002 8:44 PM > To: Exchange Discussions > Subject: RE: stopping the SPAM > > > Haven't used it personally but NEMX Power Tools (http://www.nemx.com) > looks good. > > Ed Crowley MCSE+I MVP > Technical Consultant > hp Services > "There are seldom good technological solutions to behavioral > problems." > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:bounce-exchange-94760@;ls.swynk.com] On Behalf Of James > Casstevens > Sent: Thursday, October 10, 2002 12:37 PM > To: Exchange Discussions > Subject: stopping the SPAM > > > Lately, our School District has been getting more and more > SMAM e-mails. > We are currently using Scan Mail for Exchange 5.5 and the > e-manager part > to filter out SMAM which leaves a lot to be desired because > when a user > gets a SMAM e-mail, it is deleted (about 50%) of the time, however the > user, in addition, gets a message that states "The original message > content contained a virus or was blocked due to blocking rules and has > been removed." We have discussed the problem with Trend, and > they seem > to have no way to prevent the user from receiving this additional > message. So what is the difference in a user getting SPAM or a user > getting a message saying that your SPAM has been deleted? Isn't the > whole idea to limit the number of e-mail messages to those that which > have some meaning to the user. > > My question to the group is: is there anyone using a product > out there > that they are pleased with and that is preventing SPAM from getting to > the end user, that does not send additional mails to the user telling > them that their SPAM has been deleted? > > Any advise and or guidance on this topic would be appreciated. > > Thanks in advance. > > James J. Casstevens > Network Administrator > Napa Valley Unified School District > Napa, CA 94558 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin: [EMAIL PROTECTED] > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin: [EMAIL PROTECTED]
