Is there a definitive answer to blocking SPAM via a purchase

Discussions on webmail and the Professional version.
Post Reply
JVRudnick
Posts: 237
Joined: Thu Jun 03, 2004 4:04 pm

Is there a definitive answer to blocking SPAM via a purchase

Post by JVRudnick » Mon Nov 19, 2007 9:03 pm

Hey all...

I'm getting pretty fed up with the vast numbers of spams that reach my server -- and my hosted sites. Could someone offer, is there a BEST item to buy and install to help block out the floods we seem to be getting, ie the thousands a day of stupid spams?

I run windows 2k3SP2, IIS6, MEPro (latest ver) and I wonder what "else" I could add to that to help. I already do check with most of the up and running blacklists...but is there something "else" I could add?

What do the rest of you all do? Surely while I dont' expect to "win the war" I'd sure like to cut down on the battles I seem to be losing....

?

Jim

aremdee
Posts: 59
Joined: Mon Oct 08, 2007 9:56 pm
Location: Victoria, Australia

What about Greylisting

Post by aremdee » Mon Nov 19, 2007 9:06 pm

Hi,

Have you tried enabling Greylisting? It is an effective solution (although I'm trying to find an answer to whether it can be turned on per user instead of server wide).

Hope this helps.
Roger

MailEnable-Ben
Posts: 5858
Joined: Fri Jan 16, 2004 6:49 am
Location: Melbourne

Post by MailEnable-Ben » Mon Nov 19, 2007 11:08 pm

Here is a document that covers the spam techniques that can be enabled within MailEnable;

http://www.mailenable.com/kb/viewarticl ... 020391.htm

To turn on Greylisting on a per user or post office/domain basis you will need the Enterprise version as this is geared around this for most features.
Regards,

Product Services
MailEnable Pty Ltd

To keep track of all ME company updates and version releases you should subscribe to the MailEnable list at http://www.mailenable.com or the RSS feed http://www.mailenable.com/rss.

json
Posts: 227
Joined: Sun Aug 24, 2003 6:56 pm
Location: Denmark

Post by json » Wed Nov 21, 2007 12:02 pm

I agree with aremdee, after installing Pro version 3 and using the greylist option/feature, I'm close to spam free. Only other anti-spam measure I'm using is spam assassin, but the logs tell me that most get caught with greylisting.

The only problem with greylisting is that once the spammers want to "work around" it, it's not that hard.

regards,
Steen

JVRudnick
Posts: 237
Joined: Thu Jun 03, 2004 4:04 pm

RE: Version 3...I'ma bit concerned on that...

Post by JVRudnick » Wed Nov 21, 2007 5:10 pm

Hey...
Still running MEPro 2...and while I know that v.3 is out there, I must ask before I commit to upgrading...

Are there any problems? I'll search here for sure and read what I can find, but would anyone comment on v.3 and it's SPAM killing capabilities?

?

Jim

MailEnable-Ben
Posts: 5858
Joined: Fri Jan 16, 2004 6:49 am
Location: Melbourne

Post by MailEnable-Ben » Wed Nov 21, 2007 10:48 pm

The only problem with greylisting is that once the spammers want to "work around" it, it's not that hard.
Not exactly right, the changes that are required to send to the same mail server twice with the same message header is not as easy as you might think for a spammer who needs to make their message content as random as possible. It means that they have to keep a list of who they send to or possibly start using queue management to resend a message. To add to this a spammer will often have time constraints if they have high jacked an email address or mail server and if they are using compromised rogue machines then the exploit just got a lot more complex and larger.

As for upgrading the only real issue when upgrading can be with permissions as the security of version 3 has been heavily improved upon so the services now run under a lower serviced account IME_SYSTEM.

When you upgrade especially when Plesk CP is running on the server the updating of these permissions may not update correctly for a few reasons but sometimes an error can occur.

So as soon as an upgrade is completed this should be the first thing that is checked and providing correct changes are made or updated after install then you will be fine with upgrading. Here are the required permissions that need to be propagated down to all child files/folders;

MailEnable Store (Post Offices)
IME_STORE_GROUP
FULL CONTROL

MailEnable\QUEUES
IME_SYSTEM
FULL

MailEnable\LOGGING
IME_SYSTEM
FULL

MailEnable\CONFIG
IME_SYSTEM
FULL

MailEnable\Bad Mail
IME_SYSTEM
FULL

MailEnable\Backup
IME_SYSTEM
FULL

MailEnable\Bin
IME_SYSTEM
READ+EXECUTE
Regards,

Product Services
MailEnable Pty Ltd

To keep track of all ME company updates and version releases you should subscribe to the MailEnable list at http://www.mailenable.com or the RSS feed http://www.mailenable.com/rss.

Post Reply