At 10:43 AM 3/7/2004, you wrote:
> Additionally we are not running I-Mail's Anti-Virus but we are filtering
> in-bound for (PIF, BAT, SHS, VBS, EXE and their recommendation for Beagle)

Are you using Imail rules to do this?

Yes. I use the InBound Rules for this


http://support.ipswitch.com/kb/IM-20040130-DM01.htm
http://support.ipswitch.com/kb/IM-20040303-DF01.htm


> here are the stats(based on the past two weeks as of
> midnight last night.)
>
> Total Mail Received             63,784
> Mail Identified as Spam 17,076
> False Positives             83
> False Positive Percentage         0.49%
> Review Requested                     7
> Mail Identified as Virus/Worm       840

We do around 35000 in the same time with roughly 7000 spams, and have
received 1310 virus laden emails.  I don't block spam email as I haven't
gone through the trouble of generating an automated response to notify the
recipient, but I like your setup very much.

> We download the mail forwarded to both the spam and virus accounts a
couple
> times a day and give them a cursory review...

Sounds like an awful lot of maintenance.

Not really. It's a three step process. Take the updated URL-DOMAIN-BL.TXT file that Ipswitch releases every two weeks use a small app to compare that file against a file that we have created called REMOVED-FROM-URL-DOMAIN-BL.TXT and have it auto purge any domain found in our file from the Ipswitch file and then auto create a new URL-DOMAIN-BL.TXT file. That new file and the other updates (Phrase-List.txt, etc...) get copied into a folder on the server and a batch file is run to copy those files to all the hosted domains. The other thing that we do is to then stop the Queue Manager which is set to autorestart.


Adding domains to the REMOVED from file is done as needed. For example an email from a newlestter got caught for a user today. Checked the header, checked the spam log to see why it was caught, updated the REMOVED file, ran the Batch file to update all the domains and cycled the Queue Manager. Time spent? Less than 3 minutes.

In the beginning we were doing this quite a bit but it quickly settled down and is now done just a couple times per week.



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to