<?xml version="1.0" encoding="ISO-8859-1"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/rss2full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" version="2.0">

  <channel>
    <title>spamblogging</title>
    <link>http://www.spamblogging.com/</link>
    <description>A discussion of all things spam. Stopping, tracking, responding, and more.</description>
    <dc:language>en-us</dc:language>
    <dc:creator>stenz@spamblogging.com</dc:creator>
    <dc:rights>Copyright 2006</dc:rights>
    <dc:date>2006-10-13T08:35:44-04:00</dc:date>
    <admin:generatorAgent rdf:resource="http://www.movabletype.org/?v=3.14" />
    <admin:errorReportsTo rdf:resource="mailto:stenz@spamblogging.com" />
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <sy:updateBase>2000-01-01T12:00+00:00</sy:updateBase>

    <atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" href="http://feeds.feedburner.com/Spamblogging" type="application/rss+xml" /><feedburner:browserFriendly>This is an XML content feed. It is intended to be viewed in a newsreader or syndicated to another site.</feedburner:browserFriendly><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com" /><item>
      <title>50 Billion Spam a Day</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/_VXhz339yb0/000706.html</link>
      <description>Regardless of whether this is FUD or not, there is growing talk in the IT/email world over whether or not a US court blocking Spamhaus (via removal of ownership rights to their domain name through ICANN). This all stemming from...</description>
      <guid isPermaLink="false">706@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>Regardless of whether this is <a href="http://en.wikipedia.org/wiki/FUD">FUD</a> or not, there is growing talk in the IT/email world over whether or not a US court blocking Spamhaus (via <a href="http://www.informationweek.com/news/showArticle.jhtml?articleID=193200699">removal of ownership rights to their domain name through ICANN</a>).<br />
This all stemming from Spamhaus marking a company (e360insight) as a spammer in their blacklist database that is published for the world to see and use for their own blacklist purposes. e360insight then sued Spamhaus for over $17M in damages, claiming that they are not spammers and due to this improper listing they have lost legitimate revenue, and a US court has sided with e360insight. Spamhaus then essentially said that since they are not a US group, they see no reason to pay. This is where the concern that instead the US court will step in and block their domain via the ICANN.</p>

<p>Opinions range on the outcome of this, as you can imagine a lot of them varying in severity by how much the person/group giving the opinion stands to benefit from the spam problem getting significantly worse due to this.</p>]]></content:encoded>
      <dc:subject>Legal</dc:subject>
      <dc:date>2006-10-13T08:35:44-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000706.html</feedburner:origLink></item>
    <item>
      <title>Hong Kong makes an effort to crack down on spam</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/gukFp1DwokQ/000705.html</link>
      <description>As reported by WebProNews, Hong Kong has made an effort to really crack down on spam. Unfortunately, they have gone forward into this effort with so much gusto that they have essentially made an commercial email at all illegal under...</description>
      <guid isPermaLink="false">705@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>As reported by WebProNews, Hong Kong has made an effort to really crack down on spam. Unfortunately, they have gone forward into this effort with so much gusto that they have essentially made an commercial email at all illegal under the wording of their law.<br />
<a href="http://www.webpronews.com/topnews/topnews/wpn-60-20061011HongKongCracksDownonSpam.html">From the article</a>:<br />
<blockquote>Under the bill's current form, however, an invoice sent to a customer featuring a company logo would be against the law.</p>

<p>What about that product recall notice you received via e-mail offering to replace that faulty lithium-ion battery with a new one?</p>

<p>You guessed it, completely criminal under the proposed legislation.</p>

<p>...</p>

<p>A key difference between the Hong Kong bill and US anti-spam legislation lies in legal recourse against companies who are in violation of the law. Only Internet service providers and government agencies can initiate legal proceedings against spammers in the United States, whereas any individual can initiate a lawsuit against a company under the Hong Kong bill's current verbiage. </blockquote></p>]]></content:encoded>
      <dc:subject>Legal</dc:subject>
      <dc:date>2006-10-11T15:43:14-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000705.html</feedburner:origLink></item>
    <item>
      <title>Anatomy of spam</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/uaVN8-k59Vc/000704.html</link>
      <description>The BBC has an article up pointing out the anatomy of spam. Things that are common sense and obvious to those who are in IT and work with email a lot, but perhaps less so to the average reader of...</description>
      <guid isPermaLink="false">704@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>The BBC has an article up pointing out <a href="http://news.bbc.co.uk/2/hi/technology/6038236.stm">the anatomy of spam</a>. Things that are common sense and obvious to those who are in IT and work with email a lot, but perhaps less so to the average reader of a news site.<br />
Things like why the names used are chosen, how to spot a fake email address, an image in the body, and extra text at the end among other things - all used for two reasons: 1) to get by the anti-spam tools, and 2) to get the message in front of you, so that you will open it and perhaps buy whatever they are selling (or fall for their scam) - which is really what #1 is going for as well.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-10-11T15:30:16-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000704.html</feedburner:origLink></item>
    <item>
      <title>MySpace Scam Emails</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/ehiGcLIJ7FU/000703.html</link>
      <description>A company who makes money offering technology services to avoid spam and email scams, Espion International Inc., has announced that they have found a MySpace Scam Email circulating and they say it is the first of that particular type. From...</description>
      <guid isPermaLink="false">703@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>A company who makes money offering technology services to avoid spam and email scams, Espion International Inc., has <a href="http://www.itnewsonline.com/showstory.php?storyid=5699&scatid=6&contid=3">announced that they have found a MySpace Scam Email circulating</a> and they say it is the first of that particular type.<br />
From the press release:<br />
<blockquote>The trapped email looked like a legitimate message from MySpace with the subject reading - "New message from Richard on MySpace sent on Oct 05 15:40:00 -4 2006". The spoofed message even contained real MySpace addressing, copyright and privacy information taken from legitimate MySpace "New message" notifications.</p>

<p>"When someone sends you a message on MySpace, your registered email account is sent a notification email containing a link to your new message. In this case, the link is malicious and tries to steal your personal information," said MySpace user Kurt Thayer. The MySpace Scam Site was taken offline soon after the email was trapped due to an overwhelming amount of traffic."</blockquote><br />
As it says there, the original site was taken offline, but there are potentially more on the way like this. This is not really anything new - there are always new scams coming out based on whatever is popular at the moment since that is what is likely to get people to read the email and act on it.<br />
Also note that this is a press release from a company who makes money off of you paying them to help you prevent seeing emails like this. </p>]]></content:encoded>
      <dc:subject>Scams/Phishing</dc:subject>
      <dc:date>2006-10-09T18:09:32-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000703.html</feedburner:origLink></item>
    <item>
      <title>Spammer Profile</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/8WN_InsZGHY/000702.html</link>
      <description>As spammer Christopher Williams Smith is going through various criminal cases filed against him by a variety of different law enforcement bodies (bragging about not filing taxes never seems to work out, does it?), the Twin Cities Pioneer Press has...</description>
      <guid isPermaLink="false">702@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>As spammer Christopher Williams Smith is going through various criminal cases filed against him by a variety of different law enforcement bodies (bragging about not filing taxes never seems to work out, does it?), the Twin Cities Pioneer Press has <a href="http://www.twincities.com/mld/twincities/news/local/15712302.htm">an article up about him</a>.<br />
It generally covers the items he has been in the news over lately, specifically those things ending him in jail like tax evasion, sending out spam, using a stun gun on his employees, and selling prescription drugs online among other things.<br />
From the article:<br />
<blockquote>Prosecutors say Smith's attempts to thwart the investigation escalated to a murderous plot in March when he allegedly tried to put out a hit on a witness while awaiting trial in the Sherburne County jail. Smith now faces a separate charge of witness tampering, but prosecutors want to play the recorded jailhouse conversation during the conspiracy trial.</blockquote></p>

<p>You just can't make up stuff like that. Giving employees drugs, using a stun gun on them, hiring a hit man, etc - sounds like this guy needs his own TV show.</p>]]></content:encoded>
      <dc:subject>Scams/Phishing</dc:subject>
      <dc:date>2006-10-09T12:31:09-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000702.html</feedburner:origLink></item>
    <item>
      <title>Earthlink wins case against spammers</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/jimGRsMZyX4/000701.html</link>
      <description>ZDNet reports that the two men charged in a lawsuit Earthlink filed have pleaded guilty. They now face up to three years in jail and up to $250,000 in fines. From the article: The two were identified in an investigation...</description>
      <guid isPermaLink="false">701@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p><a href="http://news.zdnet.com/">ZDNet</a> reports that the two men charged in a lawsuit Earthlink filed have pleaded guilty. They now face up to three years in jail and up to $250,000 in fines.<br />
<a href="http://news.zdnet.com/2100-1009_22-6122249.html">From the article</a>:<br />
<blockquote>The two were identified in an investigation last year by EarthLink's fraud and abuse team into activity at its PeoplePC subsidiary. The team discovered more than 25,000 junk e-mails had been sent through 10 PeoplePC accounts that originated from Miami. The e-mails contained such subject headers as "I'm finally back home" and "I just got back in town," and contained messages that marketed herbal supplements.</blockquote><br />
The fines in this instance are interesting since they are pretty high considering the article states 25,000 messages were sent. Normally they are catching people sending out millions, so it would seem these two guys were small time. I didn't read the actual case, so perhaps their herbal supplement spams broke other laws themselves - being actual scams instead of "just" unsolicited email.</p>]]></content:encoded>
      <dc:subject>Legal</dc:subject>
      <dc:date>2006-10-05T22:05:19-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000701.html</feedburner:origLink></item>
    <item>
      <title>Hormel just can't catch a break</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/jisfUR7g57M/000700.html</link>
      <description>The company who produces SPAM, the spiced ham food product, tried to enforce trademark law so that the current negative connotation of junk email will not be correlated to their name. But that isn't really working out so well for...</description>
      <guid isPermaLink="false">700@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>The company who produces <a href="http://www.spam.com">SPAM</a>, the spiced ham food product, tried to enforce trademark law so that the current negative connotation of junk email will not be correlated to their name.<br />
<a href="http://www.theregister.co.uk/2006/10/04/hormel_loses_spam_trademark_appeal/">But that isn't really working out so well for them</a>, at least in the legal sense. I really don't think their sales have changed specifically due to changes in unsolicited email trends.</p>]]></content:encoded>
      <dc:subject>Legal</dc:subject>
      <dc:date>2006-10-05T12:04:32-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000700.html</feedburner:origLink></item>
    <item>
      <title>Geek spam on the rise</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/UWeO4PT2uGI/000699.html</link>
      <description>According to MessageLabs, there is an increasing trend in "Geek spam". From the press release: In recent weeks MessageLabs has noticed an increase in the number of spam emails that are specifically targeting individuals within the technology sector by using...</description>
      <guid isPermaLink="false">699@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>According to MessageLabs, there is an increasing trend in "Geek spam". From the <a href="http://home.businesswire.com/portal/site/google/index.jsp?ndmViewId=news_view&newsId=20061002005221&newsLang=en">press release</a>:<br />
<blockquote>In recent weeks MessageLabs has noticed an increase in the number of spam emails that are specifically targeting individuals within the technology sector by using social engineering techniques. Called “geek spam,” this type of spam includes technology-related keywords within the email to dupe recipients into believing that the spam is actually something more relevant, such as a bug report. This targeted approach using hidden keywords can help to pollute the Bayesian filters often used by technology professionals. The use of technology buzzwords, such as .NET, cpan, xss and Java, hidden inside the body of the spam can ensure that the mail looks convincing enough for limited anti-spam software to allow it through.</blockquote></p>

<p>I'm curious as to why the spammers chose this route. I would imagine that it is a combination of the fact that "geeks" are more likely to get a lot of email, buy things online, and read bug reports.<br />
Perhaps "geeks" are otherwise a tough market for spam since they otherwise would not click through much of the seemingly obvious spam.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-10-02T15:27:04-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000699.html</feedburner:origLink></item>
    <item>
      <title>Gmail tip</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/XyfpSun0-qM/000698.html</link>
      <description>Speaking of Gmail, one tip that I ran across recently (apologies to whoever pointed it out, I am not recalling off the top of my head where I saw this) was that if you want secure access to Gmail, use...</description>
      <guid isPermaLink="false">698@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>Speaking of Gmail, one tip that I ran across recently (apologies to whoever pointed it out, I am not recalling off the top of my head where I saw this) was that if you want secure access to Gmail, use this url: <a href="https://mail.gmail.com/mail">https://mail.gmail.com/mail</a>. The Gmail link from Google puts you on a secure login, but then redirects to a non-secure Gmail page - going to the above link encrypts the login and the main page. This is nice if you are on a connection that you don't trust, like an open wi-fi hotspot.</p>

<p>As far as I know, this does not yet apply to the <a href="http://mail.google.com/mail/help/intl/en/about_mobile.html">mobile interface for Gmail</a>.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-10-02T15:07:27-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000698.html</feedburner:origLink></item>
    <item>
      <title>Google's Gmail is good at blocking spam</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/xufvlIzhoI0/000697.html</link>
      <description>Not only is Google's Gmail service great at blocking spam - it is also good at not blocking opt-in emails. This is one of the worries of companies who make their money from legitimate email services, and Gmail seems to...</description>
      <guid isPermaLink="false">697@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>Not only is Google's <a href="https://mail.gmail.com/mail">Gmail</a> service great at blocking spam - it is also <a href=-"http://googlewatch.eweek.com/blogs/google_watch/archive/2006/10/02/13543.aspx">good at not blocking opt-in emails</a>. This is one of the worries of companies who make their money from legitimate email services, and Gmail seems to be the best of the free email services at still getting those messages into your inbox.<br />
<a href="http://www.lyris.com/news/pr/pr-092806.html">Read the full report</a> at <a href="http://www.lyris.com">Lyris</a> for more in depth discussion.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-10-02T15:03:35-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000697.html</feedburner:origLink></item>
    <item>
      <title>Coming soon, or already here?</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/-6JT9xlDFqA/000696.html</link>
      <description>This article talks about how spam is, within a year, going to start being more focused on the user, more personalized towards the target. Based on where it found your email address, it will use different tactics to get through...</description>
      <guid isPermaLink="false">696@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p><a href="http://www.vnunet.com/vnunet/news/2165311/coming-inbox-soon-personalised">This article</a> talks about how spam is, within a year, going to start being more focused on the user, more personalized towards the target. Based on where it found your email address, it will use different tactics to get through your filters.</p>

<p>This is already happening to some extent, and I already wrote about <A href="http://www.spamblogging.com/archives/000686.html">contexual spam</a> here and this is already in place. I can only assume that the "within a year" reference implies that the techniques will get better and more widespread. As it is now, it seems there is a small group of spammers doing this, and if it is working, more will pick it up soon.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-09-30T11:44:19-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000696.html</feedburner:origLink></item>
    <item>
      <title>How to have a popular blog</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/OLHx92zvEPA/000695.html</link>
      <description>There is apparently an Australian site out there that tracks popular blogs under its umbrella. One of its users didn't flip a switch to block spam comments, and so he is getting a lot of... well, spam comments. The issue...</description>
      <guid isPermaLink="false">695@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>There is apparently an Australian site out there that tracks popular blogs under its umbrella. One of its users didn't flip a switch to block spam comments, and so he is getting a lot of... well, spam comments. The issue is that the site to rank blogs looks at how many comments a site has (likely within a timeframe I imagine) and uses that to show how popular it is - but that doesn't account for comments that are all spam.<br />
<a href="http://www.smh.com.au/news/web/spam-boosts-aussie-bloggers-ranking/2006/09/27/1159036590134.html">From an article about it</a>:<br />
<blockquote>A BigPond spokesman said it was now reviewing the use of comments as a measure of a blog's popularity with some changes planned in a revamp of BigBlog later this year.</p>

<p>"The popularity of a BigBlog will be based upon page views, not comments, so this is a lesson we've learnt from phase one of what is an ongoing project for us," he said.</blockquote><br />
Another lesson they are going to have to learn? Tracking "real" pageviews under whatever this new system they roll out. With the comment issue, spammers could flood the comments of a blog and get a high ranking. If it is just a matter of pageviews, there are ways around that as well.</p>

<p>Gaming the system is certainly something that spammers, by default, tend to be good at.</p>]]></content:encoded>
      <dc:subject>Blogs</dc:subject>
      <dc:date>2006-09-27T14:31:02-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000695.html</feedburner:origLink></item>
    <item>
      <title>Users aren't as savvy as they think</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/-GLUuTAhydk/000694.html</link>
      <description>McAfee has a press release out discussing some study they did in which they tested people to see how good they were at deciding which sites were likely/unlikely to send them spam once they obtained a user's email address. The...</description>
      <guid isPermaLink="false">694@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p><a href="http://biz.yahoo.com/prnews/060926/sftu016.html?.v=70">McAfee has a press release out</a> discussing some study they did in which they tested people to see how good they were at deciding which sites were likely/unlikely to send them spam once they obtained a user's email address.<br />
<blockquote>The quiz, launched August 15 by the McAfee® SiteAdvisor(TM) team, presented consumers with the homepages and privacy policy links of eight pairs of Web sites, and asked them to judge which site from each pair would likely guard their e-mail address. With more than 7,000 responses tabulated, the average score was only 55%, indicating that consumers are poor judges of which Web sites share e-mail addresses with third-party advertisers.</blockquote></p>

<p>Of course, since this was seen in a press release and since McAfee sells products that supposedly helps stop spam/spyware, this would clearly have to call into question how accurate this information is, since McAfee stands to directly benefit from a "the sky is falling" scenario where users clearly must buy their software to protect themselves from... themselves.<br />
That said, I'm pretty sure I agree that the average user has no clue.</p>]]></content:encoded>
      <dc:subject>Scams/Phishing</dc:subject>
      <dc:date>2006-09-27T11:08:59-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000694.html</feedburner:origLink></item>
    <item>
      <title>Subliminal ads in spam</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/8QliQ9a_kxU/000693.html</link>
      <description>This actually was news a few weeks ago, but I wasn't posting here again at that point. The issue is that some spammers have latched on to the concept of flashing content at you in the hopes that your conscious...</description>
      <guid isPermaLink="false">693@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>This actually was news a few weeks ago, but I wasn't posting here again at that point. The issue is that some spammers have latched on to the concept of flashing content at you in the hopes that your conscious mind might not see it, but your subconscious will and then act on that without you realizing why you are doing it.<br />
The idea of seeing a frame in a movie where it shows some product just for a flash and then you have a craving to buy that product - supposedly they did this with Coke and popcorn during movies.</p>

<p>Studies have shown that it doesn't really work any better than regular ads and that people tend to buy the products that they were inclined to buy in the first place, so the "trick" ad isn't changing their minds.</p>

<p><a href="http://www.adrants.com/2006/09/subliminal-advertising-makes-a-comeback-a.php">AdRants has a post up about this</a> that also has a shot of the animated GIF used in the stock spam that was sent out.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-09-25T14:33:12-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000693.html</feedburner:origLink></item>
    <item>
      <title>MS Exchange anti-spam review</title>
      <link>http://feedproxy.google.com/~r/Spamblogging/~3/iutlCgUurdo/000692.html</link>
      <description>Much of the traffic that this blog gets is from people searching for anti-spam solutions on Exchange. I have had years of experience with this, so I thought I would occasionally try and post up some reviews and thoughts on...</description>
      <guid isPermaLink="false">692@http://www.spamblogging.com/</guid>
      <content:encoded><![CDATA[<p>Much of the traffic that this blog gets is from people searching for anti-spam solutions on Exchange. I have had years of experience with this, so I thought I would occasionally try and post up some reviews and thoughts on various solutions available to Microsoft Exchange 2000/2003.<br />
Please note that these are my own opinions and your own opinion may differ, as may your experience with any given suggested product. Also note that this is the short list of major tools I have seen used on Exchange most frequently - I am quite positive there are more, but I just do not have much experience with them and therefore can't say much about them good or bad.</p>

<p><b>Spamassassin on Exchange</b><br />
I had been using Spamassassin an a FreeBSD system for a few years when I set out to try and get it working on an Exchange 2000 box. I wrote a hack that allowed that to work, and have documented that before on this site (<a href="http://www.spamblogging.com/archives/000014.html">here</a> and <a href="http://www.spamblogging.com/archives/000028.html">here</a> for example).<br />
For a small amount of mail (certainly say within a thousand messages a day, each, for 20 users) this solution works pretty well, especially once you get it tweaked and have your white/black lists worked out and the Bayesian filters trained.<br />
As noted by <a href="http://www.gadgetopia.com/post/4440">this person who tried it</a>, it takes less than a second per email, so the better your hardware, the more you could theoretically handle. Also as that same person notes though, there are better solutions - they ended up <a href="http://www.gadgetopia.com/post/4465">switching over</a> to <a href="http://www.spamstopshere.com/">SpamStopsHere</a> (something I will try and cover at a later date since I don't have any personal experience with it, yet).<br />
Do note that the best part of this option is that it is totally free and allows the admin to tinker with it and have as much control as they like. This is admittedly not always a good thing.</p>

<p><b>Built-in Features for MS Exchange 2003</b><br />
Exchange 2003, especially post Service Pack 2 and 3, has some pretty nice tools built into it for blocking spam. It can query real time black lists, has an intelligent message filter (which is MS's variation on Bayesian filtering), and it makes use of Sender ID as well.<br />
As with any of the solutions, once you get the tweaks in place and modify your white/black lists, it works pretty well.</p>

<p><b>Symantec</b><br />
I must note that I haven't used Symantec's <a href="http://www.symantec.com/antispam/">antispam</a> solution(s). So this is not a review of their product(s) in any way in terms of that - but it is a review in the broad sense of that I refuse to let any company for which I have purchasing authority buy any Symantec product. I have had years of nothing but awful experiences with them, and I refuse to further bother with them.<br />
So while perhaps in the past year or two they have dramatically changed, become wonderful people, and have the best product in the world - I suspect that the reality is that they are still awful.<br />
Again, note that this is dripping with personal opinion, feel free to ignore it.</p>

<p><b>Trend Micro</b><br />
Similar to Symantec above, but with a variation - I love these guys. We used their anti-virus product on Exchange and it was absolutely beautiful. Easy to install, easy to maintain, great features, and it worked perfectly. I loved it.<br />
But... (there is always a but) we decided we wanted to upgrade to their more complex solution and get their anti-spam features in there as well. Essentially meaning that we wanted to give them more money and they would then in turn take it and do whatever it is they do with money. Presumably roll around in it and squealing with glee, I don't know.<br />
But no, their customer service and sales department is awful and they were so rude and condescending that I cut off the transaction and am done with them. I still use them for personal computing needs, the PC-cillin Internet Security product is a good product for the price - but I won't be using them for Enterprise level applications since I don't want to reward their poor service.</p>

<p><b>McAfee</b><br />
On the flipside of the other two, I don't really like McAfee in general and have heard of many issues with them. But one client of mine wanted to use the <a href="http://www.mcafee.com/us/enterprise/products/anti_virus/email_servers/groupshield_microsoft_exchange.html">GroupShield</a> product because that is what another consulting group for them recommended. They weren't going to be interested in anything else, so this is the route we went. The customer service wasn't relevant since I dealt with this other consulting group, and then off we went, installing it on Exchange 2003.<br />
The install was "easy" although it took about 7 tries. I couldn't tell if this was a difficult install process, if this server was special, if the person installing it was clueless (I was on site, but not doing the install), or if the product was faulty. After looking back on it - I am going with the fact that the user was clueless (she messed up several other installs that week and so I think she hadn't done them before).<br />
Once installed, configured, the white/black lists are setup correctly, etc - then the product works great. BUT (always the but) the UI is absolutely awful. It runs in Java and is extremely slow (on an 8 processor 3Ghz machine with 8GB of RAM, nothing should be slow) and it is not at all intuitive. It also will toss your settings and other times will warn you that you will lose changes made, but then it won't show you the changes you made - the easiest way around this is to make changes, save, and then exit the app, and then go back in. Suffice it to say, the interface is just extremely painful. On the good side, once you have it setup to your liking, you don't need to go in there that often - especially if you keep your white/black lists in separate text files and as you update them, you can occasionally just go in and reimport those instead of having to use their interface for adding.<br />
I am torn on this product - it works really well in some respects, but it is literally painful to use in other respects.</p>

<p>This is enough for now - this is a long entry and has a lot of pure opinion content in it. I would rather have a few posts of factual references before I veer off on another opinion based rant... for now.</p>]]></content:encoded>
      <dc:subject>E-mail</dc:subject>
      <dc:date>2006-09-25T09:46:43-04:00</dc:date>
    <feedburner:origLink>http://www.spamblogging.com/archives/000692.html</feedburner:origLink></item>


  </channel>
</rss>
