Casselberry? Hello from Naples.
:)
Same issue, I'm the email admin for the City of
Naples. We used to tweak filters continuously because of this.
Routinely get questioned about why a message didn't get through and why so much
spam gets through. We've gone to a defense in depth on this. Signed
up with Postini for first level SPAM/Virus, and it gave us two benefits.
The first is it dropped the load on our server by 85% or so eliminating 99% of
the blatant spam and most viruses. It also gives the user an opportunity
to view and manage their own quarrantined files. We use Declude to further
tweak the incoming mail, and add a second virus scanning point. We
primarily do two things, one is add a subject indicating possible spam, the
other is using black lists for specific addresses. The spam header can be
sorted in Outlook on the client side to further separate the spam but still
allow the user to review the messages if they wish.
Of course the last thing we did was assign the City
Manager's admin the task of reviewing his mail, plus my boss, the Director of
Technology Services, checks his quarrantine every morning.
:)
Have we bounced a citizen's mail? Occasionally.
We apologize and white list their address. Somehow they seem to understand
if the [EMAIL PROTECTED] spam filters ate their email.
If you want to reach me off-list, work email is "jcochran
at naplesgov dot com".
Jeff
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems
Eng. (Karl Drugge)Sent: Tuesday, January 17, 2006 5:18
PMTo: Declude.JunkMail@declude.comSubject: RE:
[Declude.JunkMail] Whitelisting email address
Believe me, Id love to
find a way to do it, but when I HAVE to receive emails from hideously
mis-configured servers, whack-job citizens, and other municipalities with less
then stellar I.T. staff from any where at any time, not bouncing becomes the
worse of two evils.
As an example, if I
DELETE an email from a citizen because it meets my delete criteria ( lets say a
nut-job, retired, self declared IT samurai with a shareware SMTP server, on a
dial up account to a local home based ISP run by his best friend ) I can ( and
have ) been questioned by the City Manager on exactly WHY he didnt get this
email, because this nut-job shows up to a city council meeting and has a foaming
at the mouth fit in public. Technical explanations dont cut it in the political
arena. I have to, at the very least, send something back to notify the
originator that the email was bounced, unless its so horribly mal-formed, or
chock full of key words, that it I can absolutely guarantee its spam.
But, if someone wants
to take a crack at it, Ill be more than happy to post my config
files.
Karl Drugge
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of MattSent: Tuesday, January 17, 2006 4:28
PMTo:
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail]
Whitelisting email address
Karl,Getting
blacklisted for bouncing spam back to forged addresses would probably be a lot
worse than missing a stray message that shouldn't have been blocked. This
certainly can happen, especially if you get a lot of zombie generated
spam.It is also of course a big pain dealing with servers that bounce
this stuff back to forged addresses. Today I'm under heavy attack from
multiple sources of backscatter. Backscatter costs others time, money and
frustration. It's not fair if it is avoidable. Please reconsider
your choices. Maybe we can help you figure out a better way to deal with
this.MattIS - Systems Eng. (Karl Drugge) wrote:
I hold at
20, bounce at 40, and delete at 60.
I realize
bouncing is bad, but were government, so I have to be careful about outright
deleting email without notifying someone, somewhere.
Karl
Drugge
-Original
Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of BrianSent: Tuesday, January 17, 2006 3:38
PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail]
Whitelisting email address
What are you using for
a hold weight and delete weight?
Brian
- Original Message
-
From: IS -
Systems Eng. (Karl Drugge)
To: Declude.JunkMail@declude.com
Sent: Tuesday,
January 17, 2006 3:17 PM
Subject: RE:
[Declude.JunkMail] Whitelisting email address
I can
confirm that.
If a
single email address is white listed, then all of them get white
listed.
The
solution was a line like this : BYPASSWHITELIST
bypasswhitelist 45
6
0 0
If an
email was over weight 45, AND it also had 6 or more recipients, than it bypassed
the white-listing and checked it normally.
I never
tried to do it with individual config files.. But that might work, if it didn't
affect all the recipients.
Karl
Drugge
-Original
Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of BrianSent: Tuesday, January 17, 2006 2:16
PMTo:
