I think it goes a little deeper, too. I just went to Postfix-Spamassassin-Amavis setup as a front-end for Exchange because I had a Sonicwall ES300 for two years and it didn't even work as well as this new setup. Exchange filtration is a joke. I paid $2,000 for two years of service on the junky ES300 for 100 users and EVERYONE complained about its lack of effectiveness for two solid years. I feel your pain but to be honest, I've paid more and received way less. I hope your clients get to be as understanding as mine. There's no perfect solution, unless you hire staff to maintain it around the clock and even then it's only as good as the attention that's paid to it. Spammer hire staff in foreign countries to format emails until they get around the filters. Many of them BUY the filters and bounce emails against them until they get through and THEN send them out. We are always going to be fighting an uphill battle with spam as long as a computer is attached to the internet.
Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledf...@phhwtechnology.com -----Original Message----- From: Nate Metheny [mailto:n...@santafe.edu] Sent: Monday, July 28, 2014 11:30 AM To: users@spamassassin.apache.org Subject: Re: Ready to throw in the towel on email providing... I definitely appreciate your rant and your point of view. Sadly, until SMTP is rewritten and we're not using protocols on the Internet that have been based on very very old code and then just patched and updated ad infinitum, there isn't a "sure fire" solution. More patches, more fixes, more filters, more overhead, more wasted CPU time and bandwidth. There's plenty who won't agree with my point of view and think of it as unrealistic, but that's just the way opinions go. :) Independent email providers will never have the resources of conglomerates. We have the security and the ability to guarantee data control, delivery and confidentiality, but as far as SPAM filtering and other time and resource intensive things go, we'll never compete at the same level. Keep on keepin' on. On 07/28/2014 10:10 AM, Ted Mittelstaedt wrote: > Hi All, > > Just lost another one, dammit. Small company with about 6 mailboxes > who some consultant gave them a song and dance about how Gmail's such a > better mail service since "they don't get any spam" > > No it's not going to break us. > > But this is what I see happening. > > SpamAssassin for us filters probably about 80% of the spam out of the > box, doing nothing other than using defaults. > > If the users feed the learner, it's even better. But, the spam is > coming in at such a tremendously high volume now that when a user > account gets 5,000 pieces of mail a day, all of it except for maybe > 5 pieces of mail are NOT spam, even at 99% effectiveness, the user is > STILL getting 50 pieces of spam in a day that SpamAssassin misses, > compared to their 5 pieces of ham mail. > > they don't see the 4,950 pieces of mail we deleted for them. They > just see the 50 pieces that got past, compared to their 5 legitimate > pieces. > > So naturally the users figure we are rat bastards who aren't doing a > good job filtering. So they setup a test account at Google and "try it > out for a month" > > Of course, the account gets very little spam. Why would it otherwise? > It's brand new. It hasn't had a chance to be disseminated to all of the > mailing lists, the websites, the other coorespondents's computers of > theirs that get hit by harvesting viruses. > > Their ignorance then reinforces their invalid perception and then they > figure we are liars. So they move their domain. > > A year later, when Gmail is doing the same thing to them, they finally > figure out it's not the provider, its the spammers and oh boy maybe > we weren't lying after all. But, it's a lot of work to shift back to > us, so why bother if all the mail services are the same way? > > So they are gone, permanently, never to return. > > We have tried educating them. But spamfighting today is complex. If > you explain it completely and they understand the explanation and > believe you, they give up hope because they realize that just hitting > the delete button on those 50 pieces of spam is easier than shifting > their poor email behaviors that got them into the mess in the first > place. But then a month later the complex explanation is forgotten > and they are once more vulnerable to any snake oil sales consultant > selling them gmail. But most of them don't understand anyway. > > And if you just try to dumb down the explanation it starts making no > sense at all very quickly. > > What do other people do? Or are we just going to end up with an > Internet in about 10 years where every single email box is either on > Microsoft 365 or Gmail and the NSA has a wonderful interface to use to > hunt through whatever they want without bothering with a warrant? > > And to add insult to injury - this small company is a dental office - > subject to HIPAA - and Gmail is not (and has stated they will not) be > HIPAA complaint. We are! > > Ted > > --- > This email is free from viruses and malware because avast! Antivirus > protection is active. > http://www.avast.com -- .==== === -- - -- - - - - - ---. | Nate Metheny IT Group Leader | | Santa Fe Institute office 505.946.2730 | | cell 505.930.9390 fax 505.982.0565 | | http://www.santafe.edu n...@santafe.edu | `--- - -- - - -- - = == ==='
