Recommend me a spam filter

Discussion in 'Networking & Security' started by delemorte, Oct 10, 2008.

  1. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    Enviorment is a small buisess with less than 20 email accounts with an exchange server running Server 2K3 and Exhcnge 2K3. I run Ninja as my exchange spam filter but we got Crushed over the past couple of days. So bad ninja almost choked..(I dont blame ninja, This is not some huge exchange server and getting tagged with 30K+ emails in a couple of hours put a toll on any small server). Our average is almost 1000 emails a day getting caught by our filter but by the end of this week we had gotten over 30K in one day. That number is going down and the situation is now under control however i was looking for a secondary solution that would filter traffic before it even got to my exchange.

    Any suggestions on any products that may be out there? Does such a product even exsist?
     
  2. valkon

    valkon n00b

    Messages:
    44
    Joined:
    Dec 1, 2005
  3. XOR != OR

    XOR != OR [H]ardForum Junkie

    Messages:
    11,549
    Joined:
    Jun 17, 2003
    Such products do exist and are very good ideas.

    If you want to do it yourself, sendmail + spamhaus + spamassassin + claim + mimedefang is how I'd go. Otherwise, and for your low number of users this might be the best option, get an external provider to be your MX records and have them forward on what passes their tests.

    Google has a program I've heard good things about. Someone should know the name even if I can't remember it currently.
     
  4. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    Paying for a professional solution is whats best.. Doing it for fun is great but in this enviorment up time is whats most critical... Ill check out the solutions suggested.. Any idea on what cost may be assoaciated? Witrh the two suggested?

    BTW i jsut checked the logs.. +100K emails in the past 7 days..... :eek::eek:
     
  5. valkon

    valkon n00b

    Messages:
    44
    Joined:
    Dec 1, 2005
    IIRC Postini was a little more expensive than Microsoft's solution. I think that is the case because Microsoft needs to prove that theirs works the same/better before they can charge the same.
     
  6. XOR != OR

    XOR != OR [H]ardForum Junkie

    Messages:
    11,549
    Joined:
    Jun 17, 2003
    Last time I went digging ( a couple months ago ), it was about 2 bucks per person per month for a service with all the bells and whistles.

    Just basic filtering from postini is pretty cheap from what I recall. Like $.40/user/month I think

    EDIT: Found it; http://services.google.com/enterprise/google_msc_purchase?pid=filtering

    3 bucks a year per user for inbound only filtering. Pretty damn decent.
     
  7. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006

    thats a BARGAIN.... Do you use it? Your opinion on it?
     
  8. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    Also how hard is it to set up? Is it just redirecting my MX records ?
     
  9. XOR != OR

    XOR != OR [H]ardForum Junkie

    Messages:
    11,549
    Joined:
    Jun 17, 2003
    I have never used any hosted solution. I've only recently started researching one to use, but none of them I've looked at so far meet my requirements.

    It should be simple enough; you redirect your MX records and tell them where your exchange server is.
     
  10. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    I went over the instructions and that was all it is going to take. I ordered it ... Ill let you know what i think.
     
  11. Motley

    Motley 2[H]4U

    Messages:
    2,439
    Joined:
    Mar 29, 2005
    Out of all the positive things on the internet, Spam email has got to be the worst part about it. You have to spend lots of money just to be able to read your inbox, free of crap. It's amazing.
     
  12. VeeDubbs

    VeeDubbs Limp Gawd

    Messages:
    398
    Joined:
    Dec 9, 2005
    We actually use Postini at the small college I work at. I think I recall hearing in the $1.75 ranger per account per month. Excellent service. Catches spam and viruses. IF something something gets through to your mail box -- just forward it to spam@postini.com (or something like that) and they put it in their blacklist. Each user can setup their own settings as far as how aggressive they want to be for spam/virus/etc. Well worth the money!
     
  13. YeOldeStonecat

    YeOldeStonecat [H]ardForum Junkie

    Messages:
    11,330
    Joined:
    Jul 19, 2004
    www.untangle.com
    free

    Combine with IMF in Exchange...also free...end result is good stuff.
     
  14. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    But these are solutions hosted on my network. The issue wasnt stopping them the issue was intercepting traffice before t even hit the network. Its a matter of 30K+ emails hitting my server in just a couple of hours and causing it to bog down.

    Thanks though..I might consider that for my home Exchange.
     
  15. YeOldeStonecat

    YeOldeStonecat [H]ardForum Junkie

    Messages:
    11,330
    Joined:
    Jul 19, 2004
    It intercepts and quarantines the SPAM before it gets to your exchange server....so your exchange server will not bog down. It's an appliance that sits by itself.

    Outside hosting, we have a few clients on Postini, also a few on Appriver. I like Appriver, good fast support when you call.
     
  16. delemorte

    delemorte Gawd

    Messages:
    680
    Joined:
    Sep 5, 2006
    Thanks man. I will take a look at it..
     
  17. TechieSooner

    TechieSooner [H]ardness Supreme

    Messages:
    7,601
    Joined:
    Nov 7, 2007
    I personally disabled IMF- as Untangle does 100% well for my network...


    Untangle is simply the BEST spam filtering I've used. And is FREE, and EASY to setup.

    Like already stated, it filters it at the gateway before it ever hits your servers.
    You can run it on a cheap computer you've got laying around, for you, even a P3 or P4 with 1GB of RAM would work just fine.

    Configure it in bridged mode, and you don't need to reconfigure ANYTHING in your network, just plop it in place!
     
  18. Captain Colonoscopy

    Captain Colonoscopy 2[H]4U

    Messages:
    3,861
    Joined:
    Feb 19, 2004
    +1 for postini. we use the full mxtoolbox package at the office and have about a dozen clients using it now, too. Mail goes to them first to those spams don't bog down your internets. also, you can still access your emails when your internets or exchange server go down through their web mail app. $3/month per user. good deal.
     
  19. YeOldeStonecat

    YeOldeStonecat [H]ardForum Junkie

    Messages:
    11,330
    Joined:
    Jul 19, 2004
  20. marley1

    marley1 [H]ardness Supreme

    Messages:
    5,447
    Joined:
    Jul 18, 2000
    postini - going through google gets you lowest price but no support unless you have a shit load of users, support may not be needed

    i get postini through a reseller, charge clients 36 bucks per user per year, make no money on it, but if i have a problem i can call someone.

    untangle will be testing this week.