Re: Spam solutions - written smtp sink or spam software?

From: Martin Blackstone [MVP - Exchange] (ExchangeMVP_at_gmail.com)
Date: 09/13/04


Date: Mon, 13 Sep 2004 14:01:33 -0700

You would probably lose a lot of real email as well since time proves again
and again that people constantly mess up their DNS or never have it setup
correctly in the first place.
I agree that in theory something like this makes sense, but in the long run,
you are going to lose email and the CEO isn't going to care one darn bit
that his client has a messed up DNS record and that's why you rejected it.

I think you will find that the quality anti spam solutions out there work
quite well without forcing this type of setup.

-- 
Martin Blackstone
MVP - Exchange
http://www.swinc.com/resource/exchange.htm
http://www.swinc.com/resource/e2kfaq_appxc.htm
"Dr. Sys" <anonymous@discussions.microsoft.com> wrote in message 
news:189901c499d3$5b11f830$a401280a@phx.gbl...
>I am looking for a spam filter. It needs to be able to
> filter by the following rules.
>
> Rule #1
> The ability to, utilizing the header, verify by reverse
> DNS, that the Domain name is valid. If not, the email is
> dropped. If it passes - Rule #2 is checked.
>
> Rule #2
> Take the IP from the header, and check that it is valid
> and that it matches the IP of the domain where the email
> is supposed to originate from. If this does not match, the
> email is dropped. If it passes, it is delivered.
>
> It seems that doing this would negate emails from Open
> Relay machines, and stop spammers from sending into my
> domain who spoof the source of the email. This accounts
> for the greatest amount of spam recieved by my network.
> While I understand that alot of spam software uses RBL's,
> content filtering, etc, I have yet to see one that says
> that you can do a simple 2 rule filter like this. I am
> looking at Sybari and Symantec solutions, and neither one
> says that this is do-able with their product. Maybe I am
> just too old school for thinking this is just a simplistic
> way of applying a filter, but to me it makes sense. Am I
> going to have to take a course on writing an event sink to
> make exchange do this itself, or is there a product anyone
> knows of that will do it for me?
>
> Note, I don't care if the performance drops slightly on my
> exchange machine - or on my email system as a whole. An
> additional 10 second (or 30 for that matter) before an
> email comes through is not going to kill any user.
>
> What options do I have?
> Thanks in advance.
> Dr. Sys
> 


Relevant Pages

  • Re: Configure e-mail Forwarding not to include SPAM
    ... I would recommend Postini or Spam Soap to your client. ... filtered on Exchange 2000/Windows 2000 is because of a race condition. ... Exchange 2000 was probably so slow that it allowed CSE to filter the messages ...
    (microsoft.public.exchange.admin)
  • Re: Best settings for Recipient Filtering?
    ... Who Are Not in the Active Directory" checkbox stops about 75% of the spam at ... Using the Connection Filter with the Spamhaus RBL and the Spamcop RBL ... > It doesn't matter which version of Windows Exchange is on. ... > one reason that recipient filtering is so useful. ...
    (microsoft.public.exchange.admin)
  • Re: More SPAM
    ... Exchange 2003 offers allot of additional spam control features that exchange ... The content filter within Panda offers a good capability for setting up ...
    (microsoft.public.exchange2000.general)
  • Re: Recommended AntiSpam tool for Exchange (or AntiVirus Package that includes AntiSpam)
    ... I like Trend Micro Client Server Messaging Security for SMB as an Exchange aware AV product; includes an anti spam component in addition to desktop and Exchange anti virus components. ... Sender filtering: Drop connections on filter, ...
    (microsoft.public.windows.server.sbs)
  • Re: SMTP 127.0.0.1
    ... >mail port and type HELO 127.0.0.1 and see it show up in the log. ... not using Exchange as the server that's exposed to the Internet. ... EXIM won't control spam. ... train the filter with that, ...
    (microsoft.public.exchange.admin)

Loading