Pro ExchangePro ExchangeSPAM FilterSPAM FilterAn Exchange 2000 based An Exchange 2000 based

spam filtering solutionspam filtering solution

How does SPAM effect How does SPAM effect you?you?

In general:In general: Spam is increasing at a rate of 60% per yearSpam is increasing at a rate of 60% per year Spam accounts for over 25% of all e-mailSpam accounts for over 25% of all e-mail

Time WastedTime Wasted End users deleting spamEnd users deleting spam IT staff dealing with users effected by spamIT staff dealing with users effected by spam

Legal IssuesLegal Issues Many spam messages contain business Many spam messages contain business

inappropriate contentinappropriate content Wasted ResourcesWasted Resources

Increased storage spaceIncreased storage space Increased backup and restore timesIncreased backup and restore times

Three Type of SolutionsThree Type of Solutions Firewall\proxy basedFirewall\proxy based

Installed between the internet and incoming Installed between the internet and incoming SMTP mail serversSMTP mail servers

Prevents spam from getting to mail serversPrevents spam from getting to mail servers Mail server basedMail server based

Installed on each incoming SMTP mail serverInstalled on each incoming SMTP mail server Prevents spam from getting to user’s mailboxesPrevents spam from getting to user’s mailboxes

This is where our SPAM solution operatesThis is where our SPAM solution operates Client basedClient based

Installed or configured on each client Installed or configured on each client independentlyindependently

Deletes or moves messages from a user’s InboxDeletes or moves messages from a user’s Inbox

FeaturesFeatures

Six levels of spam filteringSix levels of spam filtering From least to most aggressiveFrom least to most aggressive

Optional support for:Optional support for: ““Blacklist” server checkingBlacklist” server checking Dynamic blocking of future spam from newly Dynamic blocking of future spam from newly

detected hostsdetected hosts Detailed logging of all incoming smtp mailDetailed logging of all incoming smtp mail Web based administration of filtersWeb based administration of filters Web based reporting of all valid and Web based reporting of all valid and

blocked messagesblocked messages

Supported Filtering Supported Filtering LevelsLevels

Blocking verses “Tagging” messagesBlocking verses “Tagging” messages Supports updating message subjects to indicate a Supports updating message subjects to indicate a

message is possibly spam instead of blocking message is possibly spam instead of blocking messagesmessages

Spam detection criteria: Spam detection criteria: Sending server’s IP listed in the public “Blacklist” Sending server’s IP listed in the public “Blacklist”

serversservers Keywords in the messageKeywords in the message Invalid format of message headerInvalid format of message header Known spam hostsKnown spam hosts

By IP and DNS host namesBy IP and DNS host names

Dynamic blocking of new hostsDynamic blocking of new hosts

Supported Filtering Supported Filtering BypassesBypasses

Sending server DNS host nameSending server DNS host name System messagesSystem messages Locally sent messagesLocally sent messages

Planned (Not in beta)Planned (Not in beta) Target e-mail addressTarget e-mail address Group MembershipGroup Membership

LoggingLogging

All valid and blocked messages are logged to All valid and blocked messages are logged to a databasea database

Local logs exist on each server containing Local logs exist on each server containing details on all valid and blocked messagesdetails on all valid and blocked messages

Separate local log files by type of spamSeparate local log files by type of spam BlacklistedBlacklisted Keyword matchKeyword match Known spam hostsKnown spam hosts

Single log file that contain all new spam hostSingle log file that contain all new spam host Log can be used to build a list of known spam Log can be used to build a list of known spam

hostshosts

Administration & Administration & ReportingReporting

Web based administrationWeb based administration KeywordsKeywords Good and bad domainsGood and bad domains Triggers that cause dynamic blocking of a hostTriggers that cause dynamic blocking of a host Management of dynamically blocked hostsManagement of dynamically blocked hosts

Web based reportingWeb based reporting Show all valid messagesShow all valid messages Show all blocked messagesShow all blocked messages

Filter by blocked reasonFilter by blocked reason Filter by message recipientFilter by message recipient Statistics of total, blocked, and valid messagesStatistics of total, blocked, and valid messages

Web Based AdministrationWeb Based AdministrationKeyword and Domain FiltersKeyword and Domain Filters

Web Based ReportingWeb Based Reporting

Additional DetailsAdditional Details Supports Access, SQL, or MSDE for data storageSupports Access, SQL, or MSDE for data storage All keywords can be managed via web interfaceAll keywords can be managed via web interface Filter level and other settings are stored in the Filter level and other settings are stored in the

registry on Exchange serverregistry on Exchange server Final version will have a web front end to these settingsFinal version will have a web front end to these settings

Host creation script included to process new hosts Host creation script included to process new hosts log filelog file Creates new host records (contact) in the AD to block Creates new host records (contact) in the AD to block

future messagesfuture messages Stores the reason why the contact was created, the Stores the reason why the contact was created, the

message header that was flagged as spam, and message header that was flagged as spam, and additional information on the host that is blockedadditional information on the host that is blocked

Queries valid and good domain lists to prevent these Queries valid and good domain lists to prevent these hosts from being blockedhosts from being blocked