Joe, We use SmarterMail as our POP3/Web mail interface. It doesn't have all the features of IMail but they do appear to be more responsive - for now.
In essence our new configuration (still under review and testing) is MX primary record points to IIS SMTP with ORF (Vamsoft) dealing with first stage SMTP spam filtering then second level with POP3 and web mail handled by SmarterMail on a separate server. This works for us so far, we're processing around 200,000 emails a day now most (98.6%) of which are blocked at first delivery attempt using ORF (constant checking on logs at the moment to check for false positives etc.) the 20-30k that get through the first level are handled by the POP3 mail server. The one problem we've found with greylisting is the difficult in providing redundant MX records, we've not yet found a solution to this except to have standby server ORF server configured but it's not ideal. You do have to be aware that greylisting introduces a delay and not all legitimate MTA's respond to greylisting very well. http://en.wikipedia.org/wiki/Greylisting. We still use Imail/Declude with Sniffer for now as well and the CPU load on that server has gone from 90%+ to around 25% (dual Xenon). CPU loading on IIS SMTP server is neglible around 2-5% (Single DuoCore). We plan to move Declude to run under SmarterMail with Sniffer and then fully migrate from Imail once we are happy that this configuration is stable and responsive. So far so good. We're still evaluating whether or not we drop Declude altogether and run Sniffer as an agent under ORF. We don't like to block but the volume of SPAM is making it more difficult to choose not to, Declude makes it easy to weight but they (Declude) are not so responsive these days and are getting expensive to run. You can do very much the same with *nix solutions as well although we have no practical experience of this although I'm sure others on the list would be willing to advise. Hope this helps. David -----Original Message----- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf Sent: 25 October 2006 12:16 To: Message Sniffer Community Subject: [sniffer] Re: Declude header not modified correctly David, Thanks for the info! I've never heard of ORF, but it sounds interesting. I really like the interface and reporting... a huge improvement over Imail. I know Microsoft SMTP is pretty fast. Is there a decent POP3 / IMAP client available. I just don't know much about the service. What features will your new system be missing when compared to Imail? Very interested. -Joe ----- Original Message ----- From: "David Waller" <[EMAIL PROTECTED]> To: "Message Sniffer Community" <[email protected]> Sent: Wednesday, October 25, 2006 4:54 AM Subject: [sniffer] Re: Declude header not modified correctly > You can run Sniffer under Vamsoft ORF running under IIS SMTP this is good > for your incoming. Vamsoft can run other agents such as anti-virus, > invURIBL > & SpamAssassin. > > We're moving away from Imail and Declude, Imail because it's expensive and > Declude because it's expensive and they don't respond to support emails > from > this registered user. I am disillusioned with Declude, they started with a > very good service but since they've gone all corporate things have gone > down > hill ever since. > > David > > -----Original Message----- > From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf > Of Joe Wolf > Sent: 25 October 2006 00:17 > To: Message Sniffer Community > Subject: [sniffer] Re: Declude header not modified correctly > > I have this problem as well, but I'm running an older version of Declude. > > As far as I know there's no way to fix the problem other than supposedly > the > newest version fixes the issue. I'm not going to spend another penny on > Declude so I'm stuck with the problem unless I switch mail servers. > > Declude went down hill when the new owners took over. They have a group > of > worshopers on their list that attacks anyone critical of management which > makes it impossible to give critical information on the product. > > I love Sniffer. I wish all products worked as good as Sniffer does. I > just > wish it didn't run underneath a third party plug in (Declude) to run on > Imail or Smartermail. > > Does anyone know of a different mail server that's EASY to use that offers > the features of Imail and doesn't require Declude to run Sniffer? > > Thanks, > -Joe > > ----- Original Message ----- > From: Herb Guenther <mailto:[EMAIL PROTECTED]> > To: Message Sniffer Community <mailto:[email protected]> > Sent: Tuesday, October 24, 2006 6:11 PM > Subject: [sniffer] Re: Declude header not modified correctly > > Just as a follow up, I have not had any email returned from Declude > in the last 4 business days. So, they are just ignoring the problem even > tho the tools are all doing their part to identify the messages are spam, > the header mod is useless so it goes right thru the filters. So their > answer was to have me update to the latest version, which did not solve > the > problem, and then I did not hear back from them after any email and a > call. > > Herb > > Kami Razvan wrote: > > We see that a lot too.. we run 2.14 > > Kami > > ________________________________ > > From: Message Sniffer Community > [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Monday, October 16, 2006 5:44 PM > To: Message Sniffer Community > Subject: [sniffer] Re: Significant increase in false > positives > > > We see this occasionally with Declude 1.82. What version > are you running? > > Darin. > > > ----- Original Message ----- > From: Herb Guenther <mailto:[EMAIL PROTECTED]> > To: Message Sniffer Community > <mailto:[email protected]> > Sent: Monday, October 16, 2006 5:35 PM > Subject: [sniffer] Re: Significant increase in false > positives > > Hi Darin; > > Not seeing a lot of false pos messages, but there are lots > of spam messages sneaking through our system because declude is not > modifying the header correctly. It is adding a header stub to the bottom > of > the message so that users mail client filters which look for the modified > subject line is not working. Anyone else having that issue? > > Herb > > > > -- > Herb Guenther > Lanex, LLC > www.lanex.com > (262)789-0966x102 Office > (262)780-0424 Direct > > > This e-mail is confidential and is for the use of the intended > recipient(s)only. If you are not an intended recipient please advise us of > our error by return e-mail then delete this e-mail and any attached files. > You may not copy, disclose or use the contents in any way. > > > ############################################################# > > This message is sent to you because you are subscribed to > > the mailing list <[email protected]>. > > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > > To switch to the DIGEST mode, E-mail to > <[EMAIL PROTECTED]> > > To switch to the INDEX mode, E-mail to > <[EMAIL PROTECTED]> > > Send administrative queries to <[EMAIL PROTECTED]> > > > > > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <[email protected]>. > To unsubscribe, E-mail to: <[EMAIL PROTECTED]> > To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> > To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> > Send administrative queries to <[EMAIL PROTECTED]> > > ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]> ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
