---------- Original Message ----------------------------------
From: Len Conrad <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Sun, 09 Jul 2000 11:31:57 +0200
>open-relay or DNS validation features). IMGate just has too many
>advantages, and no out of pocket cost, to ignore.
I concur. IMGate looks spectacular. Seems like the second best way to do spam
prevention(#1 way is to make spamming offense punishable by execution).
HOWEVER.....here are three reasons I can't use IMGate yet:
1 Don't know Unix\Linux yet. Don't have time to learn right now.
2 Don't know Unix\Linux yet. Don't have time to learn right now.
3 Don't know Unix\Linux yet. Don't have time to learn right now.
It's on my list of things to do Q4, maybe over the holidays.....I would guess that at
least a few folks on the list share this position and this begs the question: any
plans for a win32 version? Perhaps something that could comfortably live on an an old
9x machine or even a 2K machine?
I know begers can't be choosers, but it is just a thought.....
Here's another thing: I recently started using MRTG to baseline my router traffic. I
think MRTG is the second coming of Christ, and highly recommend if for my patients who
chew gum.
Anyone thoughts about using MRTG to look at Imail stats?
Dave
>>Mostly just throwing ideas around(too much free time on my hands). I will
>>probably use the separate AV server concept.
>
>I'll drink to that.
>
>>Reason: If the AV server
>>fails, then the next thing in the MX record is direct to the mail server.
>
>Well, no. I assume that if one is serious about securing mail with AV
>scanning, then securing mail with anti-spam is included, too.
>
>Neither Imail or AV scanner should be in MX records, but two IMGate
>machines as MX 1 and 2, or one IMGate machine on-site as MX 1 and another
>machine offsite as MX 2. IMGate blocks a ton of spam (but not all) and
>hostnames with broken DNS setups and no reverse zone setups, blocks msgs
>which exceed your max msg SIZE setting, so the AV scanner isn't directly
>taking incoming mail (AV scanner seem to have little or no anti-spam or
>open-relay or DNS validation features). IMGate just has too many
>advantages, and no out of pocket cost, to ignore.
>
>>quickly. My point: Someone with some programming experience should come up
>>with some nice code to extract relevant items from the Imail logs...not just
>
>As you probably know or guess, all of these pb's have been addressed in the
>Unix world. There are many log scanning tools, but one I have my eye on is:
>
>http://www.cert.dfn.de/eng/logsurf/
>
>but I haven't played with it, yet.
>
>>totals for the day as in the existing code on the Imail support site, but an
>>organized, detailed, yet immediately available listing of stats --
>
>"immediately" is the key word. Since users usually don't know they have a
>mail pb until, let's say, an hour has passed (I sent mail that wasn't
>received, I haven't received a mail I know was sent) and then they retry
>the mail, "near real-time" mail log analysis is good enough.
>
>Besides the Imail sysMMDD.txt log with SMTP and POP3 info, another feature
>that needs "instrumenting" is the Imail mail queue, since buildup there
>indicates delivery pbs, both remote and local (eg, I had local delivery
>pb's just two days ago when my personal .mbx file got locked, I think in a
>conflict with Norton Speed Disk. It took me 20 or 30 minutes to realize the
>my mail checks were finding no mail (ie, that's the "near real time"
>window) and then some more minutes to jump around in the dark trying to get
>my .mbx unlocked. Not sure how I did it.)
>
>>little VB script could do the trick. I'd write it myself but unfortunately
>>I'm not smart enough(stunning self realization).
>>
>>2 Why the f**k is virus scanning software for mail gateways so expensive?
>
>There aren't a lot of suppliers of AV scanners for SMTP gateways and they
>know that their market is not the mass market but the professional market
>of ISP' and corps. The price follows.
>
>I think we can achieve, at least, 80% or 90% of AV scanning effectiveness
>of the multi-$1000 "corporate brand" AV scanners by using a $99 pkg from
>www.KasperskyLab.ru on FreeBSD (or Linux). I hope to get mine running in
>July and I will document it on the IMGate site.
>
>So my objective for my ISP is this mail infrastructure:
>
>1. IMGate MX 10 ; done
>
>2. IMGate MX 20 ; done
>
>3. IMGate + Kapsperksy scanner for incoming mail ; todo
>
>4. IMail ; done
>
>5. IMGate + Kapsperksy scanner for outgoing mail ; todo
>
>6. IMGate outbound-only delivery gateway ; not done, but easy to do when
>MX 10 becomes overloaded.
>
>Len
>
>Len
>http://BIND8NT.MEIway.com: ISC BIND 8 installable binary for NT4
>http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
