SPAM FILTERING
Unsolicited Commercial Email (UCE, also called SPAM) is big problem in today's corporate and ISP email systems. It's time to fight the SPAM with our Mail Server. We use multiple strategies for reducing the amount of SPAM that you and your users will have to put up with.
We have built three different strategies into the Mail Server to help you avoid the lost time and wasted resources of SPAM:
- Filtering Common SPAM Activities
- Email Content Filtering
- SpamAssassin Software
Filter Common SPAM Activity
Spammers often use predictable and detectable techniques when sending SPAM. Your Mail Server has been designed to can recognize these techniques and reject the message. Some of the techniques we use include:
- DNS check for valid mail server (MX record) of domain in senders address. This means if the email address of the sender does not have a valid mail server in the DNS system then it will be refused.
- Limits number of envelope recipients (RCP TO's) for incoming email to 50. Spammers often include hundreds of recipients on one email. Our Mail Server also uses a technique called "tar pitting", which causes a processing delay when a sender has excessive recipients; this is done deliberately to tie up the Spammer's resources
- Any email including a "%" sign in the SENDER and/or RECIPIENT address will be rejected.
- Email addresses containing the local host name, IP address, or reverse host name are rejected.
Email Content Filtering
We also filter through email content for known SPAM and virus patterns. Some of the basic filtering includes:
- Attachment Filtering: Because of the high risk of viruses and other problems, we automatically return all email with any of the following attachment types: .vbs, .lnk, .scr, .wsh, .hta, .pif.
- Content Filtering: There are certain keywords that when found in an email will cause the email to be returned to the sender. These include any email where the following keywords are found in the subject of the email: viagra, ADV:, XXX, EXPLICIT, TEENS, A D U L T S, ADLT:. This filtering is in addition to the Anti-SPAM Filtering described elsewhere.
SpamAssassin
SpamAssassin is the leading anti-SPAM technology available on the Internet today. And is bundled with your Mail Server. SpamAssassin works by attempting to identify SPAM using text analysis. Using its rule base, it uses a wide range of heuristic tests on mail headers and body text to identify SPAM. SpamAssassin typically differentiates successfully between SPAM and non-SPAM in approximately 95-99% of cases, depending on the kind of mail you receive.
SpamAssassin uses the following strategies:
- Header Analysis: Spammers use a number of tricks to mask their identities, fool you into thinking they've sent a valid mail, or fool you into thinking you must have subscribed at some stage. SpamAssassin tries to spot these.
- Text Analysis: Again, SPAM mails often have a characteristic style (to put it politely), and some characteristic disclaimers and CYA text. SpamAssassin can spot these, too.
- Profile Matching: SpamAssassin uses a wide variety of local and network tests to identify SPAM signatures. This makes it harder for spammers to identify any one strategy that will allow their messages to get through.
- Scoring and Tagging: SpamAssassin works by scoring a message based on its content and headers. Matching on specific SPAM characteristics will raise the score of a message. Some characteristics even lower the score. After calculating the final score of the message, if the score is greater than 5.0, the message is tagged as SPAM so that it can be filtered by the user later using their regular email program.
Summary
We can't guarantee you won't get any more SPAM. But we can assure you that we have built a system that uses some of the best techniques and tools available any where to give you a state-of-the-art system for fighting back. |