Other Spam Filtering Solutions

The spam blocking features in Outlook 2007 can help considerably in blocking unwanted messages, but there are other options you should consider in addition to the Outlook 2007 filtering technologies.

Filtering in Exchange Server

If your company or organization uses Exchange Server, you can perform some spam filtering tasks right at the server without adding third-party software. Exchange 2003 Server and Exchange Server 2007 both support domain filtering for virtual Simple Mail Transfer Protocol (SMTP) servers.

Exchange Server 2007 offers some additional features not included in Exchange 2003 Server, making it potentially more effective for blocking spam. One server in an organization is designated as the Edge Transport server and is responsible for mail flow and control between internal e-mail servers and the Internet. By default, only unauthenticated, inbound e-mail from the Internet is filtered, although internal e-mail can also be filtered if desired.

Exchange Server 2007 can filter e-mail based on a number of different criteria, including:

  • Content. E-mail messages are examined to see whether they have characteristics of spam and are checked against a safe list aggregated from the Safe Sender lists of Outlook 2007 users within the organization.

  • AttachmentAttachments can be filtered based on either the Multipurpose Internet Mail Extensions (MIME) type of the file or the file name. Administrators can choose to strip the attachment and deliver the message or reject the message, either with a failure message to the sender or silently.

  • Connection. E-mail is evaluated based on the IP address of the server that is attempting to send the message using a variety of safe and blocked lists to determine whether the message should be delivered.

  • Recipient. The addresses that the e-mail is sent to are compared to a local directory and an administrator-managed blocked list to determine what to do with the e-mail.

  • Sender. Like the Recipient filter, this filter uses a locally maintained blocked list to block certain addresses from sending e-mail to the organization.

  • Sender ID. The sending system’s Domain Name System (DNS) server is queried to determine whether the IP address of the system that originated the message is authorized to send e-mail from that domain. This verification process protects you against spoofed e-mail addresses, a ploy commonly used by spammers and phishers alike.

  • Sender Reputation. This feature collects information about e-mail senders and evaluates incoming e-mail based on a number of characteristics to assign a Spam Confidence Level (SCL) rating. This rating determines whether the message is delivered, and the rating is passed to other computers running Exchange Server when the message is sent to them.

If you are responsible for administering a computer running Exchange Server, you will find additional information in the Help files provided with Exchange Server.

Using Third-Party Filters

Several third-party antispam solutions are available that you can consider for your organization. For example, Symantec’s MailSecurity for Microsoft Exchange provides content scanning and filtering capabilities. MailSecurity filters incoming messages for content, spyware, adware, and attachment file types (not just file name extensions).

MailSecurity is available for Exchange Server, Domino, and SMTP servers. You’ll find more information about MailSecurity at www.symantec.com/Products/enterprise?c=prodcat&refId=1011.

Another product to consider is GFI Mail Essentials (www.gfi.com/mes). Mail Essentials provides several levels of content filtering with support for blocked lists, safe lists, and additional header checking options, as shown in Figure 12-4, that enable it to detect and block spam based on a broad range of criteria.

GFI Mail Essentials provides an excellent set of filtering features.

Figure 12-4. GFI Mail Essentials provides an excellent set of filtering features.

Mail Essentials works with Exchange 5.5 or later, Lotus Notes, and any SMTP e-mail server. In addition to spam filtering, Mail Essentials supports the automatic addition of message disclaimers, mail archiving, inbound and outbound mail monitoring, automatic replies, and a Post Office Protocol 2 (POP2) Exchange service that downloads messages from POP3 servers and delivers them to Exchange Server mailboxes.

These are just a few of the solutions available for filtering and managing messages. Many mail servers offer their own filtering capabilities, and many other products provide filtering services for existing mail servers.

One of the most prevalent spam filtering solutions is SpamAssassin, based on an open-source heuristic scanning application developed originally for UNIX-based servers. You can find information about open-source SpamAssassin at www.spamassassin.org.

Depending on your existing mail server platform and the development expertise within your organization, you might be able to implement your own filtering solution based on SpamAssassin. There are commercial implementations of SpamAssassin, as well. For example, the Network Associates suite of SpamKiller products is based on SpamAssassin. You can find more information about SpamKiller at www.mcafee.com/us/enterprise/products/anti_spam/.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset