On 09/03/02 at 08:24, James Strickland wrote:
> Are there any good 3rd party spam filters that can work in conjunction
> with SIMS, or is there a way, within SIMS, that I can filter messages
> based on subject or from?
FAQ. SIMS does not do anything with the DATA portion of SMTP messages. A
message's headers, including the 'Subject' and 'From' lines, are
transmitted in the message's DATA, so no, SIMS cannot filter messages based
on them. If SIMS is set to deliver mail to folders instead of mailbox
files, you might be able to have third-party a virus checker and/or spam
filter scan incoming messages once they've been delivered. I've never tried
that, and don't know of anyone who has, so I have no idea how well or how
reliably it might work.
About the best you can do with SIMS along these lines is to enable 'Verify
Return-Paths' and then route to 'error' or 'null' any return-path addresses
you observe in spam that you think might be somewhat less than random.
Blocking based on return-path addresses (or 'From' addresses, for that
matter) is spotty at best, though, because they're just too easy to forge
and spammers play all sorts of games with them.
> I have hundreds of IP addresses blacklisted, but since many spammers
> use mutliple servers it is a nearly impossible task to make a dent in
> the amount of spam received using that method. I also subscribe to
> three different blacklists. Unfortunately, I have only seen a small
> drop in spam with these blacklists, but I have had quite a few
> clients and vendors blocked. Any help would be greatly appreciated.
What blacklists do you use? I've found the Osirusoft list (all sub-lists
except for SPEWS and Smart Hosts), supplemented by ORDB,
korea.services.net, along with my internal list based on spam that I and my
users have received, to be a pretty good combination for my situation. They
at least keep the spam down to a dull roar with little or no collateral
damage.
Of course, some spam is always going to get through no matter how closely
guarded your mail server is, because blacklists and other anti-spam
measures are necessarily reactive. They guard against where the spammers
are known to be and techniques that they are known to use. As the spammers
move from network to network and find ways to get around anti-spam
defenses, they're always going to be a step ahead.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
