Anti Spam Solutions. ? Any Good one's ?

Portal Home > Knowledgebase > Articles Database > Anti Spam Solutions. ? Any Good one's ?

Posted by James Peter, 01-31-2008, 11:55 AM
Hello, We're actually looking for an ANTI-SPAM Solution. Any Good One's? Any good and Affordable Solutions ? Thank you
Posted by ceridius, 01-31-2008, 11:59 AM
Spam assassin is widely used.
Posted by James Peter, 01-31-2008, 12:09 PM
Well Yes. But I'm Looking for an Alternative Solution(better than Spamassasin) Thanks for your time. HiVelocity
Posted by NicAddress, 01-31-2008, 03:01 PM
I use load-balanced Ironmail appliances at one location and the Chirpy mailscanner setup at another.
Posted by James Peter, 02-01-2008, 12:48 AM
Thanks for the response NICaddress. Its appreciated
Posted by Vinayak_Sharma, 02-01-2008, 12:57 AM
There is http://assp.sourceforge.net also, for cPanel server http://www.grscripts.com are providing paid ASSP Delux and http://www.sultanserver.com have a free one ASSP X. Then there is DSPAM too http://dspam.nuclearelephant.com
Posted by husaren, 02-01-2008, 07:03 AM
a copule of these in RRdns setup has been doing the job extremely well for me last few years. http://www200.pair.com/mecham/spam/ easy to setup and maintain.
Posted by dotHostel, 02-01-2008, 07:12 AM
If you are looking for a solution for one domain, I hightly recommend Google Apps Standard Edition (free).
Posted by PCTechMe, 02-01-2008, 07:27 AM
MailScanner works great and is very scaleable. If you have fairly low volume, you can even set it up on a VPS or an old box in your closet to get you started.
Posted by gplhost, 02-01-2008, 04:13 PM
To me, there is no such thing as "one unique magical solution". We use multiple one at the same time: - basic FQDN check, see if the sending From: is real with a domain that exists with a MX entry - RBL server checkings - SPF checkings, then if it doesn't pass SPF, do greylisting (we use tumgreyspf to do that, for which I did a Debian package that has been sponsored, you can safely use the SID package in Etch or use the one of our repository) - DKFilter to use Domain Keys All the above do very low load on the server, then it goes to: - Amavis, that calls Clamav, and then Spamassassin At this point, all the above BUT spamassassin are just rejecting mail. When spamassassin finds something, then it just marks it as spam, then at the time of delivery, it's sent to a SPAM imap folder. When a client receive spams not marked as such, they can send it back to the server to spam@example.com so then sa-learn gets the message, and the baysian filter of Spamassassin will catch the spam if it comes again. All the above is integrated in our open source solution, if you want to have a look to our setup script and do it by hand in your cPanel or whatever... DO NOT search for one unique magical solution, it simply DOES NOT WORK. Thomas
Posted by James Peter, 02-02-2008, 07:14 AM
Thanks everyone for your responses. I really appreciate it
Posted by AtoZ, 02-02-2008, 09:45 PM
Can anyone direct me to some how-tos for the above? I'm getting 1600+ spam emails a day to my single domain. I have it running through Cloudmark in Outlook which keeps it out of my inbox, but I'd like to stop the obvious spam at the server level.
Posted by gplhost, 02-03-2008, 02:42 AM
Hi, Add this to your postfix config: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, permit_sasl_authenticated, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client list.dsbl.org, reject_unauth_destination, permit For tumgreyspf, check the SID package in Debian, and especially the README.Debian in the doc folder. Thomas
Posted by bitserve, 02-03-2008, 03:01 AM
I don't think spam assassin is accurate enough to be a spam solution, except for home/hobbiest email users. The above DNSBLs are worse. I highly recommend SpamStopsHere if you're looking for affordable. If I have to, I'll explain why paying $1 per mailbox to have the anti-spam pros manage the product for you so that all you have to do is pay the bill to stop the spam before it reaches your network is better than spending loads of money and time playing with a spam assassin box on your network trying to figure out how to make it block more spam and stop blocking email from your angry customers. So many of us offer hosting and try to convince our customers of the benefit of outsourcing to save time and money and how the web host through economies of scale can provide a better solution for less cost than trying to do it oneself. Yet, so many hosts try to do anti-spam themselves. I don't get it.
Posted by gplhost, 02-03-2008, 03:47 AM
Hi, As I just said, I agree that Spamassassin alone is NOT enough. DNSBL are not enough too, what works is to combine all of them at the same time. What you are talking about here seems to me to be yet-another-external-mx-solution, and nothing seems to be better than what I just talked about. What makes it more accurate than what I just said? Most commercial solutions like the one you are talking about are in fact based on very known software and things available in open source. I don't see how this kind of site is more innovative, to me it's about the same as many other things that I saw in the past. It gives you a quarantine system that is all but innovative (we have it as well in the form of a SPAM imap folder), but it's less convenient because you are bound to this specific service, away from your mail server. There is absolutely NOTHING that talks about a specific technology at spamstopshere, it only talks about attachments checkings. Few lines of configuration to block some attached content type in Postfix will do the same, and you can as well use the Spamassassin OCR plugin. But which is quite useless to bloc spams, as most will be text based only. For virus, well clamav does the job, so no need to check later on. Thomas
Posted by bitserve, 02-03-2008, 04:28 AM
SpamStopsHere and Postini both use proprietary solutions. SpamStopsHere actually pioneered URL filtering, which means they filter based on the URL being advertised in spam. It got them ranked #1 for accuracy in the industry, and a month after the review brightmail started offering URL filtering as well. Spam keeps changing though, and companies like this stay on top of it. Why spend your time trying to stay on top of it, when you're not going to do as good of a job as the pros? SpamStopsHere actually doesn't recommend using a quarantine, as they've told me before, if you have to review your spam, you might as well review it in your inbox and don't use an anti-spam product. They're accurate enough where you don't have to use the quarantine. However, larger companies find it useful to have their help desk be able to rule out the anti-spam product quickly when someone reports a missing email. That's where the quarantine comes in. SpamAssassin is not accurate, and IP based DNSBLs are inaccurate based soley on the way they work and aren't even anti-spam products so much as they are policy enforcement. "Hey, someone from your IP address reportedly sent spam, so we're going to not accept email from you, regardless of whether your email message is spam." If there's some other misconception I can clear up, please let me know. You totally missed my analogy. I can imagine joe web hosting customer saying "They're just using open source stuff anyway. I can just install Fedora on my computer at home and host my web site there."
Posted by abssorb, 03-07-2008, 12:37 PM
I can verify that Postini comes so close I'm happy to consider it perfect.
Posted by nwilkens, 03-07-2008, 12:59 PM
Using the services of a company like Katharion.com, or Postini.com give you the best of all solutions for SPAM. You do nothing, and they keep the rules updated. You get much less spam. Easy to implement, just update your MX records.
Posted by Babushka99, 03-07-2008, 03:52 PM
Check out Barracuda Network's Spam Firewall. www.barracuda.com You can even get a trial appliance if you're in the US.

Add to Favourites Print this Article

Knowledgebase

Anti Spam Solutions. ? Any Good one's ?

Our Services

Client Menu

Legal