Anti-Spam software for Exchange2k 1

[DarkHat]

Hello All....
Probably like you, we have a lot of spam on our mail servers... And we are trying to find the best solution to resolve this situation. This is not a easy and fun job. Almost all of our users complain about that.(Next time they will think were they put our email address, but this is another subject! ).
So we are looking to buy a good solution againt spam.

What we do at this moment...
We have a Relay server in the DMZ running sendmail... This relay forward all our email to our Exchange server. This relay server is member of a few black list domain. This is not bad... But our users still receive spam mail. What we are looking for is a Content-subject filtering solution...

What are you using in your compagny?
If you know a all in one solution it will be great... (Relay - AntiVirus - Anti-Spam - Etc)

Specs: Exchange 2k sp3
Win2k SP3
600 users
1 000 000mails a week...

Thank you for your Help!
:-D

 

[YFronts]

We use mailweeper with Exchange which sits in the DMZ. It's pretty good at spam filtering but I think you'd need to check their website to see what version would suit you.

http://www.mailsweeper.com

 

[OdedShafran]

You can use Symantec Filtering for Exchange 3, or Panda AV for Exchange....

Oded Shafran,
Network Administrator

 

[DarkHat]

I also found that....
It's loook like a good product...

http://www.ealaddin.com/esafe/mail/index.asp

 

[MattWray]

Have you all looked at this faq858-3572? I have navigated to the ms-Exch-Turf-List-Names, but do not see where to add the block list....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[de1458]

some additional website to browse are

http://www.gfi.com

,

http://www.mailfrontier.com

personally, I think the symantec product for filtering is just a marketing tool, not really designed for real world uses.

 

[wacobd]

We use Surf Control E-Mail filter. Great product and it does reverse DNS lookups. You can visit their site at

http://www.surfcontrol.com.

 

[kmcferrin]

I use XWall.

http://www.dataenter.co.at/products/xwall.htm

Easy to set up, highly configurable, and filters at the gateway.

 

[wibbe]

Hi 3433432343,

It sounds like you are running a buissniss critical system.
Then there is only 2 products that I can recommend:
Antigen from Sybari and Trend.

This products will give you Antivirus, Blacklist-support and content filtering in realtime without a massive overload.

No, it is not free or even sheep, but it works great.

// Wibbe
Senior Exchange Consultant

 

[securityforums]

GFI mail essentials is FREE for the anti-spam elements

Ive also experimented with antispam protection at firewall SMTP proxy level with the likes of watchguard but this can get a little expensive with a large amount of users

GFI talks to RBL(list of known relay servers) and can forward the spams to a public folder. Works really well with exchange 2000

http://www.security-forums.com/forum/viewtopic.php?t=6290&highlight=gfi

----------------------->

http://exchange.security-forums.com

http://www.security-forums.com

 

[MattWray]

Star from me securityforums! I downloaded the mail essentials, but didn't install after I saw the 60 day trial. Doesn't say on their site that blacklist checking keeps working...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[securityforums]

Hi mattwray

The url was in the link I posted via the security forums thread

Here it is anyway

http://www.gfi.com/mes/anti-spam_freeware.htm

"GFI provides a freeware version of GFI MailEssentials that includes anti spam and disclaimer features. Using it, Exchange administrators can check mail against popular blacklists such as ORDB and SpamHaus as well as add a disclaimer to all outbound mail"



----------------------->

http://exchange.security-forums.com

http://www.security-forums.com

 

[MattWray]

So is that diiferent from the normal mail essentials? I downloaded the 60 day eval. Will this keep blocking the black-listed domains, or do I need to download the version in the above link?

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[MattWray]

Nevermind. I just read further down and see that the freeware is the eval, just after 60 days the full version options quit working, but the blacklist still does....

Thanks Again!

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[mickeytech]

I don't see any value just using the 'free' blacklist feature. It doesn't block much anyway. All the functional parts are disabled after 60 days. I guess the so called 'freeware - anti spam MailEssentials' is for marketing only...

 

[Goldstone]

I tried Antigen by Sybari (which is great for antivirus) but the administration and management features of the anti-spam add-on were not great. It had no whitelisting feature which was problematic.

I settled with iHateSpam Server Edition (

http://www.sunbelt-software.com/)

which had the features I was looking for. It's been working great and is extremely flexible.

 

[MattWray]

mickeytech,
I have to disagree. I have blocked an average of 600 Spams a day. Not too shabby in my opinion... Especially since I have $0 in the budget for Anti-Spam.

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[mickeytech]

Matt,

Since MailEssentials only allow one black list site to check against at a time, it is limited. Which site are you using? and what is your pecentage of the successful blocking?

I tried ORFilter

http://martijnjongen.com/eng/

, which is FREE. It allows a list of servers to check against and has blocked 95% of the spams. It worked GREAT!

Mickey

 

[mickeytech]

Matt,

I forgot to mention that we are comparing the BlackList feature ONLY. When you say, it blocked 600 spams a day, are you using the BlackList feature ONLY?

Mickey

 

[MattWray]

It doesn't just allow a blacklist site. You can import a list of domains. I got around 4000 from

http://www.msu.edu/~scanlon3/spam_black_list.txt

and added about another couple hundred myself. Not sure what the percentage that made it thru is. I know my boss went from about 250 to 60 a day. Unfortunately upper mgmt has now nixed it anyway.
Thanks for the link, I will check that out also.
Yes, I only used the blacklist/whitelist feature. Didn't want to get used to the good stuff if I wasn't going to be able to keep using it....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com