RE: filtering spam

[Steven Peck DNET]

Title: Message

I just have my user's forward the email header information or not delete it and go look myself. I take the domain closest to the originator and block that and all the sub domains. That seems to have gotten MOST of the offensive stuff.  Periodically I add a few more. Of course, I currently have a relatively small environment with only a few hundred people.   Now, originally they would just forward the entire message to me, wiping out header info and causing the occassional discomfort.  :) (There is nothing like opening a graphically laden message with the HR manager standing right next to you -DOH!)   -sp   -----Original Message----- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 10:12 AM To: MS-Exchange Admin Issues Subject: RE: filtering spam Can't live with 'em...   Can't be paid without 'em...   -----Original Message----- From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 11:58 AM To: MS-Exchange Admin Issues Subject: RE: filtering spam   Mail Essentials doesn't have that option, but I'll be looking for that on what I'm migrating to.  The only reason the user was ticked was because management sent out a memo stating that IT would be blocking those kinds of emails......mgmt didn't have a clue & of course didn't ask for my input on the wording of the memo :)  Don't ya just love mgmt? -----Original Message----- From: Matthew Carpenter [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 11:32 AM To: MS-Exchange Admin Issues Subject: RE: filtering spam You can only do so much. The user needs to do their part too. If you are getting spam with no text, block the "no subject" or "no body" messages. I do that already   -----Original Message----- From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 11:20 AM To: MS-Exchange Admin Issues Subject: RE: filtering spam   You are absolutely right Martin, the domains are forged, change frequently & the from email addresses are faked also.  Get some kind of content filtering software.  Currently I use Mail Essentials from GFI, but will be migrating to a Linux flavored software that is going to be much more configurable when I learn how to configure it :)   I have a Sherry Abercrombie Porn Filter list & you're absolutely right, it is entirely too disgusting to post publicly.  Just wait until someone at your company receives a porn email that has NO text in it at all that will trigger the filtering, it's just a bunch of pictures, ouch.  I took a lot of heat on that one until I got the person that received it to understand that our content filtering is only for text, not pictures.  -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 8:03 AM To: MS-Exchange Admin Issues Subject: RE: filtering spam You are wasting time. Most of the domains are forged and they change every day. I have recently started playing with content filtering. I pulled out a copy of Webshield SMTP and are blocking by keywords in the subject. It is working great. Ill bet we are blocking about 75% of our focus which is porn SPAM.   I am now working on the Martin Blackstone Porn Filter list, buts its too disgusting to post publicly. -----Original Message----- From: Steven Peck DNET [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 30, 2002 1:02 PM To: MS-Exchange Admin Issues Subject: RE: filtering spam We use a third party product but it's manual entry too.  If we get porn spam, then I will block the domain.  We're up to about 60 and that seems to have reduced it to very small trickle.  A lot of cz domains.   -sp   List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm