I don't know if this helps, but our setup seems to work well. We have all incoming mail first passing through a Symantec Antivirus for SMTP Gateway (SAVSMTP) in our DMZ, where the email is virus checked and also given a spam rating. This server prefixes the subject of any potential SPAM with the phrase "SPAM:".
This mail is then passed onto our email server, which is running IMail 8.10 and also another instance of SAVSMTP (so the emails are effectively virus and spam checked twice). SAVSMTP then passes the emails on to IMail, which we have configured to use Port 1025, as SAVSMTP is using port 25, obviously. This setup allows us to virus check all mail we send internally, as well as mail we send out. But the big benefit is that we exclude our own email domains from the SPAM check in SAVSMTP on the email server. This means, if we send mail internally, it will never be checked for SPAM, but all other emails coming in will still be checked. Pretty handy. As I said, SAVSMTP prefixes the subject of all SPAM messages with SPAM: In the IMail Administrator we created a Rule that places any messages with this in the subject, into a mailbox called SPAM. This mailbox is only accessible via WebMail, which stops users from being bombarded with SPAM in their inbox. Even when we were prefixing the spam messages but still delivering to the user's inbox, they were still complaining about receiving too much spam. So, we deliver it only to their Webmail. Then the responsibility is on the end user to regularly check their SPAM folder in webmail, and report to us any false-positives, so we can Whitelist them in SAVSMTP. There is a handy utility we found from Ipswitch, can't recall the name, but we run a script every night which passes a few parameters to this utility which searches all SPAM mailboxes and deletes any messages older than 7 days. So a SPAM message will sit in Webmail for 7 days before being automatically deleted. It's up to the user to check their spam folder. With this, you can always set up a Message Rule in your own Webmail that moves all messages with SPAM: in the subject into the Main Mailbox, so your mail client will download it (if you don't want to check your webmail). I hope this makes sense. It seems to work really well for us. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Heath Sent: Saturday, 24 April 2004 1:33 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] spam filtering what to do with the suspected spam? OK, I've got a small question, I know what I'd like to do, but I want to know what you all do as mail admins. We run a ASSP > NAVG > imail setup, my suggestion. I plan on getting rid of NAVG for declude anti-virus in the near future so thats not an issue. Currently the former admin is catching all suspected spam, and refusing it, never even makes it to NAVG, while I do partly agree with this, it's an all or nothing approach, with the possibility of losing business due to false positives. ASSP has a setting that lets you copy all suspected spam to an email address, I've done this on other networks and it works fine, if theres a false positive, I go find it, put it in that person's account and life goes on, once a week it gets purged. Does anyone else do anything different? Thanks! Scott To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
