Re: Antivirus on SBS 2003



I have IMF and RBL on my own server, but I won't do RBL on a client's
system. While helping a friend with his clients, I have had too many
instances of the RBL servers incorrectly listing domains, or dozens of
domains, and the clients did not get mail for a day or two.

I explained to my own clients how RBL works, and that they seem to screw up
every six months or so, which would stop legitimate mail. They decided to
get more spam and no accidentally dropped mail because of wayward RBL
servers. If they were more reliable, I would use them everywhere.

Personally, I do not need to get mail that comes from any domain outside the
USA, and I wish the IMF could block that way.

I contacted Trend about it and they asked me to send them each spam after
saving it as a .MSG file. I send them several every day.

Here is Trend's answer:

Please provide us copies of the Spam emails in .MSG format so that we can
have a look at the original HTML source code and headers. This can be done
as follows.

A.) For users of Microsoft® Outlook
1. Go to the Outlook Inbox of the original recipient of the email (Please do
not use the forwarded copy to the admins.)
2. Open the spam message by double-clicking on the email.
3. Click on File > Save as...The "Save As" dialog box appears.
4. In the "Save as type" field, click the drop-down arrow and select
"Message Format". Save the message with an *.msg extension.
5. Choose the location where the file is to be saved. By default, the system
selects "My Documents".
6. Save the spam mail(s) and place them in a password-protected ZIP file
(Password: novirus). Limit the size of the attachment to 3 MB.
7. Create a new mail message that's addressed to spam at support .dot
trendmicro.dot com and attach the zipped file containing the spam messages.
Please specify the password used for the zip file.
8. Send the message, and CC: support at support.dot trendmicro.dotcom in
your reply.

Take out the obvious stuff in the email addresses above if you want to send
the unflagged spam to Trend.

Gregg Hill







"Kevin Weilbacher [SBS-MVP]" <kweilbacMVP@xxxxxxx> wrote in message
news:ud$12gFxGHA.2448@xxxxxxxxxxxxxxxxxxxxxxx
Can't say you are alone in your thinking ( re Trend's Spam filtering).
Have you enabled IMF yet? That, along with RBL has helped slow down spam
big time here.

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"


"Gregg Hill" <bogus@xxxxxxxxxxx> wrote in message
news:%23Iw9V6AxGHA.4880@xxxxxxxxxxxxxxxxxxxxxxx
I was liking Trend CSM Security for SMB, but the spam filtering truly
sucks.

About a third of spam gets through the filters, even when set on High.

Gregg Hill



"Brian Smith" <brian28100-msnewsgroups@xxxxxxxxx> wrote in message
news:OcK1d7twGHA.4140@xxxxxxxxxxxxxxxxxxxxxxx
Hi All,

I am planning to implement my first SBS 2003 server in the coming
months. Most of my experience is in the enterprise space. I am
wondering, what antivirus solution do you use on your SBS 2003 server?
What do you like or dislike about that product? What would you
reccomend for SBS 2003 in light of the current products available.

Thanks,
Brian







.



Relevant Pages

  • Re: Cannot receive email from several clients in the same domain...
    ... Is there any way you can get access to the SMTP logs for your domain ... Only using Cloudmark for spam detection ... communicating with my server so no error's to troubleshoot. ... Clients that we cannot receive email ...
    (microsoft.public.exchange.admin)
  • Re: Cannot receive email from several clients in the same domain...
    ... It just seems strange that they see a successful send but you see nothing ... unable to receive mail from several clients within a division of a ... Only using Cloudmark for spam detection and have whitelisted ... an attempt from the sender's server's communicating with my server so ...
    (microsoft.public.exchange.admin)
  • Re: [SLE] Stopping spam to postmaster@ account?
    ... First you have to analyse what kind of Spam you are inflicted with. ... And that is telling you that your server has accepted the mail from a client that announced itself in HELO as "PC01" with the IP 219.142.253.248. ... The IP and HELO are indeed from google and it is true that that ip has no reverse dns, ... greylisting Most spam clients do not queue their spam and thus you will never see most of the spam. ...
    (SuSE)
  • Re: Intractable spam! (Exchange 2000)
    ... value that _claims_ to be that server. ... from any RBL, begins to flood us with connections again. ... If your spam filter can't distinguish spam from ham without relying on ... that motivate consumers to respond. ...
    (microsoft.public.exchange.admin)
  • Re: Fucksitcks!
    ... The thing I like second best is that I don't get any spam. ... Courier MTA & IMAPS server. ... RBL, white listing, sender validity, grey listing, dictionary/alphabet ...
    (uk.rec.motorcycles)