Good News Everyone!
We have a working prototype of this called the Gauntlet. Right now it
holds the message for a x period of time determined by the
administrator, and will re-run the message though message sniffer. We
should have a version 2.0 sometime next week that will re-run the tests
through Declude as suggested. Details and installation instructions here
http://mailsbestfriend.com/downloads/docs/Gauntlet_1.0_Instructions.pdf
Unfortunately this utility only works with SmarterMail, If you are
running IMail or pre-tested spam continues to be a problem for you
please contact us as we have a few other options for you to consider.
David Barker
Mail’s Best Friend
Email : [email protected]
Web : www.mailsbestfriend.com
Office : 866.919.2075
On 10/30/2014 2:11 PM, Scott Fosseen - Prairie Lakes AEA wrote:
Here is a thought I have that may be effective on these zero-day SPAM
campaigns. It does have a big drawback, but the users may be OK with
it if it stops the SPAM.
Here is my idea. I am going to say this is from my standpoint of
using SmarterMail.
The basic idea is to process each message through declude twice. Any
message that declude did not whitelist or delete would be sent to a
hold queue folder and after a set amount of time declude would rescan
the message.
The first time through declude the message would process and drop out
of declude only if whitelisted, or deleted. The message would also be
counted by reputation tests such as barracuda. Once the message is
processed it would be put in a hold queue where it would set for a set
amount of time (Say 30 min). The delay would give a chance for tests
to identify SPAM campaigns. After the Queue delay has passed Declude
will process the message again and take the normal action to the
message when complete.
Thoughts?
SPAM Tests
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to <[email protected]>
--
David Barker
Mail’s Best Friend
Email : [email protected]
Web : www.mailsbestfriend.com
Office : 866.919.2075
Mobile : 978.518.6461
