Try ASSP http://www.asspsmtp.org
It can run on the same server as Imail and is a SMTP proxy, which analyses the SMTP conection. There are Scripts to export users & Domains to ASSP. Whith that, after an initial training of the filters ans lists, you will have aprox. 75+% less (or mor if you won't tag but only block spam) connections. No further Spam filtering is needed. ASSP manages automatic Black/Penalty lists, Baysian filtering, automatic intelligent whitelisting for known adresses (which you send intendently mail to, not for lists, out-of office notices etc.), All sorts of connection test (Helo, MX, r-dns, DNS-Black/Whitelisting, Senderbase, SPF, manual Balck/Whitlists, delaying, comunity greylisting, too many IP-Adresses for a domain in a timeframe, number of connectiosn totally, per domain, per timeframe ...), Content filters (URIBL, Regexes, Baysian Filter, Virusscanning with clamAV...), Noprocessing and Whitlist filters, It runs fine on windows, onyl requires a perl installation and is an very active open source project. With the automatich penalty list, it will do the analyzing of the connections. Matti > I was wondering if reading the daily imail logfile one could > determine trends that spammers use and then accumulate the IP’s of > the sending servers based on the trends to populate the smtp control > access list? It seems to me that from looking over my own logs I can > see patterns of abuse by spammers such as sending a test batch of 20 > spams to the server and other such things that are later filtered by > mxguard/sniffer. > My goal is more of a 90% reduction in mail processed/filtered which > would substantially reduce the load on the server. > Thoughts? > Bill Foresman > Matrosity Hosting > www.matrosity.com > 850.656.2644 - Matti Haack - Hit Haack IT Service Gmbh Poltlbauer Weg 4, D-94036 Passau +49 851 50477-22 Fax: +49 851 50477-29 http://www.haack-it.de Registergericht Passau HRB 5678 USt. ID: DE195625715 Besuchen Sie jetzt unseren neuen INTERNET&NETWORK Security Shop mit faszinierenden Angeboten rund um Ihre Netzwerk- Sicherheit: http://www.inn.de -- Ausgehende E-Mail wurde auf Viren gescannt -- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
