Short version: No.
Those of you who've been here awhile, no need to read further.
Hmmm...
I recently joined this Forum (middle of last week) so not being a long time member I read your comments and they certainly do NOT seem to reflect our experience using the "free" Anti-Spam features of I-Mail. That said we did need to spend some time initially "tweaking" it to get it working well but for those trying and having difficulty you might want to try our settings.
Additionally we are not running I-Mail's Anti-Virus but we are filtering in-bound for (PIF, BAT, SHS, VBS, EXE and their recommendation for Beagle)
While we are not very big (hosting our own plus 37 customers domains) here are the stats we are getting (this is based on the past two weeks as of midnight last night.)
Total Mail Received 63,784 Mail Identified as Spam 17,076 False Positives 83 False Positive Percentage 0.49% Review Requested 7 Mail Identifed as Virus/Worm 840
Here are our settings:
Connection Filtering
Using spamhaus, ybl, v6net and SpamCop for DNS Blacklist
Verify MAIL FROM Address enabled
Verify HELO/EHLO Domain enabled
Delete after 2 MatchesContent Filtering
Statistical Filtering enabled
Forward to [EMAIL PROTECTED]
Use Primary AntiSpam Table enabled
Phrase Filtering enabled
Forward to [EMAIL PROTECTED]Content Filtering (HTML)
Feature Filtering
Script Tag enabled
Invalid Tag enabled
Deceptive URL enabled
Embedded Comment enabled
Mail is Spam if 2 conditions are detected
Forward to [EMAIL PROTECTED]
URL Domain Black List
Forward to [EMAIL PROTECTED]When mail gets fowarded to the [EMAIL PROTECTED] account the info manager sends the following message:
------------------------------------------- "Automated response - Quarantined Email:
Your message to: %t regarding: %s
did not reach the recipient, due to content our Server considers to be SPAM. If your message was genuine, please:
1. Forward THIS message to [EMAIL PROTECTED] 2. CHANGE the Subject Line to: "PLEASE VERIFY".
It will be placed in a queue to be forwarded to the intended recipient. Allow time for the review, generally within 24-hours. Requested mail will be reviewed, ALL OTHERS MAY BE DELETED.
Process used to analyze email:
1. Check sending server against lists of known "spammers" 2. Verify sending host and user are valid 3. Check email content for key words, phases and formatting 4. Check for invalid HTML formatting in the message
Given the volume of SPAM captured by our filters (+1,000/day (20% of the +/-5,000 emails received/day, about 7 (less than 0.75%) are really valid) if you do not request a review the same day you risk having your message summarily deleted.
[EMAIL PROTECTED] Summit Internet Services" -----------------------------------
Mail that gets trapped as containing a prohibited attachment type gets forwarded to the account "[EMAIL PROTECTED]" and it generates the following email to the sender
---------------------------------------- "Automated response: Possible Virus/Worm Content
Your message to %t regarding %s
Did not reach the intended recipient this is most likely due to executable content in the message.
If this is not the case we recommend that you compress your executable program with an application like WinZIP (http://www.winzip.com) and then resend your file in ZIP format.
System Admin" ----------------------------------------
We download the mail forwarded to both the spam and virus accounts a couple times a day and give them a cursory review. The spam account is sorted by subject so valid emails pretty much jump out at you. We then redirect those messages on to the reciepient (currently averaging just under 6 per day). Obviously if someone sends an email requesting verification (currently averaging less than 1 per day) we can find the message faster and ensure that it gets delivered. The rest get deleted.
Same goes for the review of the mail fowarded to the virus account.
We update with Ipswitch's new AntiSpam tables every two weeks and we keep a text file that has the domains that we want removed from their "Domain Black List". We have a simple little app that compares their list against ours, removes the domains that are found on their list and creates a new file without the domains we do want to receive from (like: usatoday.com, bankofamerica.com and businessweek.com, some of the domains they are blocking are ridiculous). We determine domains that need to be removed from their list by seeing why false positive email got identified in the first place. That domain gets removed from the Domain Black List and added to our list of domains that get purged from their list. We are very sparing in our using a White list since a spoofed address could then send mail without running through the filters.
Obviously some Spam still gets through with these settings but our false positives are currently less than half of one percent and the users are not getting slammed with anywhere near the volume of mail that they were getting. We have been running these settings since June, 2003 and we figure we spend about 30 min. a day reviewing the mail that gets caught and redirecting the valid email. Our users have been very happy with this level of service.
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
