At 10:47 AM 12/23/00 -0500, you wrote:
> >> Date: Fri, 22 Dec 2000 18:16:55 -0800
> >> From: Charles Stanley <[EMAIL PROTECTED]>
>
> >>Are you running Imail and Declude on NT server, or NT WS? <<
>
>NT Server (actually now W2K Server SP1) with NAI/McAfee NetShield 4.5 SP1.
>
>I have to give NOTHING but a GLOWING endorsement to Declude Virus. It is
>already effective in blocking numerous viri every single day.  Sure, it
>still has a (little) way to go before one would consider it "feature
>complete" - but I can't believe I was running without it all this time!
>
>Declude Anti-Spam is ALSO very effective in DETECTING spam - but
>unfortunately is subject to many "false positives" because the ORBS database
>(and others) contain several large dial-up providers, including UUNet
>servers, generating hundreds of thousands of non-spam email every day.

Our tests, and live production for several months now, indicate that you 
can safely delete based upon RBL, DUL, RSS, OSDUL, OSSRC & OSSOFT.  OTOH, 
we found ORBS to be too militant.  They were blocking Earthlink, for 
instance, because they felt Earthlink was not responsive enough to the SPAM 
problem.  We also found OSRELAY to be unreliable.

We do not use heuristics, because of too many false positives.  Ditto for 
MailFrom, although Scott is working on it.

Declude kills a lot of SPAM and our clients really appreciate it.  Declude 
Virus, in conjunction with McAfee Total Virus Defense, also has a good 
track record here.  We highly recommend both products.


>   (I
>suppose some of the large providers don't bother to report to ORBS when they
>fixed a one-time open relay - because they can afford to simply blame the
>little ISP on the receiving end for not accepting inbound mail from them.)
>Currently, I mostly can only use Declude to "flag" incoming email as
>suspected spam.  For me, the ultimate goal was to REJECT/BOUNCE spam as it
>is detected. This way the sender knows there was a delivery problem (and
>why) and can take it up with his own provider.  Realistically, I don't
>expect that feature added for quite some time (if ever).
>
>So right now, it's the Virus feature which justifies the purchase of
>Declude - 10 times over.
>
>Best Regards
>Andy Schmidt
>
>Argos Networks
>600 East Crescent Avenue
>Suite 203
>Upper Saddle River, NJ 07458-1846
>
>Phone:  +1 201 934-9411 x20 (Business)
>Fax:    +1 201 934-9206
>
>http://www.ArgosWeb.net/
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

----
Don Brown - Dallas, Texas USA       Internet Concepts, Inc.
[EMAIL PROTECTED]            http://www.inetconcepts.net
PGP Key ID: 04C99A55                  (972) 788-2364  Fax: (972) 788-5049
Providing Internet Solutions Worldwide - An eDataWeb Affiliate
----


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to