Chuck,

For ease of use and limited gateway functionality, you might want to try Alligate (www.getalligate.com or www.alligate.com). Alligate will apply greylisting 'selectively' if you want it to, and that will result in far fewer issues than full-on greylisting. Selective greylisting is at least 99.9% effective as full on greylisting as it is triggered by the behaviors that are associated with the type of spam that is vulnerable to it.

I would recommend not using SAV. That will create some issues for you, and it is not appropriate to use other's servers to validate massive amounts of forged addresses. Greylisting will take care of the same problem anyway.

Alligate supports either real-time querying of valid addresses from your server, or you can load it with a list of addresses just like IMGate using the same export tools.

I run 4 MX records, and I reject about 80% of the connections to my MX1, while my MX2, MX3 and MX4 servers reject over 99% of the connections. Note that many of these connections would never reach Declude anyway as many are the result of dictionary attacks or backscatter which both often result in sending to bad addresses. You will however see a 50% or larger reduction in volume going to IMail/Declude as a result of just selective greylisting (which approximates the effect on legitimate addresses).

Matt



Chuck Schick wrote:
Anyone using a spam gateway (Like IMGATE) or proxy (like ASSP) in front of
declude.

I am intrigued by the idea of using something that will reject the messages
before accepting it for delivery and then scanning it.  I would only want to
use the gateway/proxy to perform graylisting, Sender Validation, tar
pitting.  According to Len Conrad this could result in a 70 to 90 percent
reduction in spam.

Ultimately I would like our spam filtering to be where we reject the message
before the data command and messages that we do accept for delivery we scan
with declude and if it is identified as spam it will be delivered to a
junkmail folder in the users mailbox - which they can check via webmail or
configure their mail clients to download it.  I want to get out of the
business of holding or deleting spam.

Any thoughts, comments, ...? what have others done.

Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to