Multilayered Email Security and Archive for Gateways, MTA's and Servers

Archive for the ‘Anti Spam, Antivirus’ Category

New End-User Interface for Mailspect Antivirus and Antispam Quarantine

Tarrytown, New York, July 11, 2011. Mailspect has released a new version of its popular email filtering software, Mailspect Defense. The new version, Mailspect Manager 1.7.3, includes a re-designed end-user interface for its Message Viewer module for email quarantine. The new interface puts all end-user commands on a single Action Ribbon eliminating the need for end-user training. In addition, end-user Black and White Listing of quarantined email involves a single click.

“Mailspect Defense is an end-to-end email security solution for mail gateways and servers. Through its control panel, Mailspect Manager, the software manages email security during all three phases of email processing: before it enters the email queue, during antivirus and anti-spam scanning and in post-queue quarantine. The software protects against computer viruses, spam, phishing, malware and Internet attacks. In post-queue, Mailspect Defense provides a state-of-the-art email quarantine that lets end-users and systems administrators manage “grey” email. With version 1.7.3, the end-user can act upon the emails in the quarantine using one-click button commands to: Remove, Deliver, Forward, Reply, Save to desktop, Export, Report False Positive, Print, Add to Whitelist or Add to Blacklist. The buttons are self-explanatory and easy-to use”, said Paul Sterne, president, RAE Internet, Mailspect’s parent company.

“ We took the new interface ideas that we had incorporated into a sister product, Match My Email, a email integration application for Salesforce.com, and applied them to Mailspect Defense. The net result is a much cleaner and intuitive interface that improves the customer experience.” said Serhiy Fyrin, Head of Development, RAE Internet Inc., the owner of the Mailspect brand.

“We also incorporated the Action Button inside of the actual email so that there is no jumping between windows in order to take an action.” said Ovidiu Bivolaru, Product Manager, Mailspect Defense.

Version 1.7.3 also includes a number of improvements based on customer and reseller requests.

1. White and Black Lists handle aliases automatically
2. F-PROT anti-virus scanner is detected by Control Panel.
3. Easier search for blacklist entries.
4. Domain admin is not allowed to change his or her own permissions within Mailspect.
5. Domain admin is not allowed to set user permissions (domains, aliases) that are outside of the scope of his or her own permissions.

About RAE Internet
RAE Internet, Inc. is headquartered in Tarrytown, N.Y. with operations in Romania and the Ukraine. RAE Internet is the developer of Email Stream Management, the proprietary technology underlying its end-to-end email security and archive solution, Mailspect , and its email-to-database integration application, Match My Email. RAE Internet offers three products: Mailspect Defense that offers end-to-end security for email gateways and servers; Mailspect Archive that archives e-mail in compliance with regulations; and Match My Email that integrates e-mail and its attachments with core business applications like Salesforce.com. RAE Internet is also the North American distributor of F-PROT Antivirus ‘Fire & Ice’ and a worldwide reseller of Cloudmark.
Contact Info: Paul Sterne, president , sterne ( a ) Mailspect.com

How to Stop NDR Spammers

Recently Asked Question:  Can Mailspect stop NDR spammers? 

The antispam business is a constantly evolving game of cat and mouse.  No one can afford to under-estimate the creativity of the criminal mind.  Spammers are constantly developing new techniques to evade and fool spam filters and engines.  Recently, they have developed a clever way of circumventing spam filters called NDR. 

 The technique exploits so-called NDR emails which stands for Non-Delivery Reports.  This is a standard for the SMTP protocol.  Most of us call these emails “bounce back” notices.  NDR emails  are normally triggered by the user entering an incorrect email address that the email server cannot deliver.   They have also been called Non-Delivery Receipt, a (failed) Delivery Status Notification (DSN) message, and a Non-Delivery Notification (NDN).  The spammers send emails masquerading as NDRs and because they look legitimate they slip through the real-time black lists and spam engines such as Spamassassin, Cloudmark and Mailshell.

Mailspect has developed robust techniques based on content filtering and rate limiting to combat and stop NDRs.  We think that it is the best NDR spam defense on the market.  The actual techniques involved are viewed as trade secrets.  They are disclosed to customers and well-known participants in the Open Source community to avoid the techniques being analyzed and perhaps circumvented by professional spammers.

 If you would like to understand Mailspect’s NDR defense techniques in the context of a 30-day trial of Mailspect Defense, please contact support@mailspect.com

Real-Time Blacklists Remove 67% of Spam

A prospective ISP customer asked us today about the effectiveness of Mailspect Defense at the pre-span, scan and post-scan layers.  They asked what proportion of the email stream is ‘real or white emails’ versus ‘spam or black emails’ versus ’gray or quarantine emails’.  We were surprised that the ISP didn’t know this data because Mailspect comes with a built-in reporting tool that tracks the number and composition of the email stream by hour and shows it to the system admin in a nice clean graphic.

Email Stream By Hour and Composition

These are data from the Mailspect internal email server that we shared with the ISP.  Looking at the pie chart, we pointed out that the key to antispam and antivirus efficiency is to remove as much spam in the pre-scan layer as possible.  The blue section labeled RBL [real-time black lists] shows that Mailspect Defense removed 67% of the email stream as spam in the pre-scan (or pre-queue for the technically precise) layer.  If you want to know which real-time blacklists we used to achieve such a high score, please contact support@mailspect.com

We did this analysis to help the ISP estimate the number of emails that would end up in quarantine (gray emails) so they could size the servers and storage needed for their implementation.  We estimated that 8% of the email stream will end up as gray email in the quarantine after being scanned by Cloudmark or Mailshell.  We provided them with a Quarantine Sizing Calculator to help them estimate the size of the quarantine digest store based on the number of emails per user per day, black and white email detection levels, and the number of days of quarantine retention.

We also demonstrated how to email the quarantine digest to each user everyday or use an RSS feed for the tech savy.

Mailspect Defense is an amazing product as proved by our near 100% renewal rate.

Recently Asked Question:  How much spam gets removed at the pre-scan or SMTP gateway layer using Real-Time Black Lists or RBL, also know as Blackholes ?

Subsequently, the ISP looked into its data and determined that it could remove 87% of spam at the pre-scan / pre-queue  /  at the SMTP gateway layer using well-configured real-time black lists or RBL.    It shows that ‘consumer’ email streams are dirtier than buisness email streams like Mailspect’s.

Communigate Pro Integration Improvements

Based on customer and partner requests, Mailspect has updated Defense to better integrate with Communigate Pro and Postfix. These updates will save customers’ money because they will support single box implements without sacrificing speed or throughput. Specifically, Mailspect Defense nows takes advantage of new native CGate Pro features related to the handling of email spam such as CGP reject and defer actions, CGP custom rejection templates and client host IP address extraction from the CGP envelope. The upgrade also includes Postfix improvements, namely Whitelisting of TLS/SASL autenthicated users.

Mailspect has a long history of supporting Communigate Pro implementations at enterprises and ISP’s or internet service providers. Mailspect Defense is considered the best Postfix antispam and antivirus platform integration on the market and it continues to improve.

Anti Spam and Antivirus Features of Mailspect Defense

   

Mailspect provides one of the most accurate and comprehensive solutions to protect your email from spam, viruses, phishing, and fraud attacks. Mailspect offers two levels of spam protection: Mailspect Defense which supports and automatically updates the Open Source antispam and antivirus engines, ClamD and Spamassassin; and Mailspect Premium Plug-Ins that integrate and maintain commercial engines from Cloumark, Mailshell and MDNA for anti spam and from ESET, F-Port, Kaspersky and Sophos for antivirus to increase filter accuracy. All Mailspect solutions include a policy engine that enables configuration on a per-user, per-domain or per-direction basis, giving you the flexibility to master the constant challenge these threats have become.

Mailspect Antispam Features

  • Mailspect improves the accuracy of Open Source spam filters by adding pre-scan support of DNSBL (IP address blacklists), SURBL (domain blacklists), spamtraps, user generated black and white lists, and frequency/dictionary thresholds and throttles. 
  • Mailspect is much faster than Open Source spam filters. This increased speed is due to how we implemented the technology.
  • Mailspect reduces the burden on system and help desk administrators due to its intuitive and user-friendly end user quarantine interface.
  • Best of breed commercial antispam plug-ins for the best protection including Cloudmark, MDNA and Mailshell. For the technically proficient, Mailspect offers the following features:
  • Customize spam handling by integrating URI filters with Mailspect spam scoring.
  • Fine tune how spam is handled with per-policy and per-user spam actions. Self-provision spam actions (quarantine, discard, reject, mark header, mark subject, deliver) to reduce the support burden.
  • Dynamically block dictionary attackers, abusive senders, violators of spam traps or other repeat message system offenders.
  • Fine tune spam scoring by aggregating the results of spam content modules, content inspection rules, RBL sites, SPF and SURBL. Custom spam scoring is used to mark the headers of email that violate RBL sites, avoid single test responses and many other applications.
  • Multi-level WBL processing including SMTP level, per-user, per-policy and per-feature. Implement features like greylists or spam traps but exempt known IP’ s from tests.
  • Integrated error checking easily removes poorly constructed spam.
  • Greylisting and integrated Postfix Policy Server
  • Stop offensive content, block email based on headers or more with Mailspect’s content inspection module.

Replacing Maia Mailguard with Mailspect Version 5

Mailspect is an ideal upgrade/replacement for Maia Mailguard.  It will operate on the same Postfix front-ends you currently use with Maia and provides major improvements in spam quarantine management,  spam detection, versatility and performance.  Maia customers that we speak with are really excited about Mailspect because it provides so much more functionality and saves time.   

To ease the transition from Maia, Mailspect can read aliases, white and black list and recipient lists from any MySQL database.

LEARN MORE

Enterprise Grade Antispam and Email Archival for Xserve

Turn any Xserve into a blazing fast email filtering, archival and attachment stripping gateway with MPP. MPP’s single click installation ends spam and provides valuable policy enforcement features not found in any other application. Try MPP today and see why MPP is revolutionizing Xserve email servers.

  • Enterprise Grade Spam Protection
    MPP has the most innovative antispam technology available for Xserve email servers.
  • Malware Protection
    Protect your unlucky PC brethren from email borne malware
  • Enterprise Grade Archival
    Never lose another email again. Centrally store your email in one searchable database. Digitally sign the email to ensure data integrity. Find the email you need with our intuitive web access and save it or restore it to your email server.
  • Content Controls
    Stop information leaks, review sensitive email before it leaves, route important email based on content
  • Attachment Controls
    Strip large attachments and make them available on your web or ftp server
  • Web Access
    Access spam quarantines, archives and configure MPP with an intuitive web interface
  • Simple Installation
    One click installs everything and configures your email server
  • MTA Support
    Postfix, CommuniGate Pro, Surgemail

Email Virus Protection with MPP

Email Virus Protection

MPP provides a complete solution for protection against email borne viruses, spyware, trojans, worms and malware. MPP supports best-of-breed antivirus scanning plug-ins from open source and commercial sources.

MPP Antivirus Features

  • Virus Actions – Mark Subject, Mark Header, Discard, Reject, Disinfect Quarantine
  • Warn Sender/Receiver/Admin with flexible macros to send meaningful messages
  • Complete Quarantine Review Interface with qReview blocks viruses from being downloaded or executed.
  • Open Source, customizable end-user review – QReview
  • Multiple Virus Engine Choices – F-PROT, Sophos, ClamAV, Kaspersky, ESET, McAffee
  • For use on SMTP proxy or Sendmail, Qmail, Postfix, Exim, Sun Java Enterprise Messaging Server, CommuniGate Pro or Surgemail Server

MPP for Email Service Providers

MPP was engineered with the needs of email service providers in mind. Spam quarantine services and email archiving represent additional revenue streams for email service providers. MPP provides you with the tools and framework to provide carrier grade services to your customers. MPP offers unparalleled scalability, throughput as well as ease of administration. Most importantly, quarantine screens are customizable so service providers can offer branded solutions to their customers, at a price that the competition won’t match.

Service Providers use MPP on their email gateways or on supported MTA’s. Many replace AmavisD or Maia when they need higher performance, more sophisticated policy features, better quarantine interfaces, email archive or to reclaim the time that they are spending managing a pure Open Source solution.

MPP works with the MTA’s that email service providers use such as Postfix, Exim, Qmail, Sendmail, CommuniGate Pro and the Sun Java Systems Messaging Server. The systems works on virtually all Linux and Unix operating systems as well as on Windows using VMware.

MPP for Service Providers Datasheet


Here’s how you will benefit:

  • Gain new revenue streams by offering on-demand services like email archival, content filtering, and attachment stripping using our policy engine that supports domain based service configurations.
  • Improve system response time by automatic archiving of older emails from the IMAP mail store to the archived mail store.
  • De-duping redundant emails and attachments to save storage space, which saves you money.
  • Streamline operations and respond to customer requests faster with customized SQL logging and tracking.
  • Reduce support costs of using a pure open source solution. Maintain all the flexibility of open source with better support and more expansion options.
  • Optimize your security environment by blending the best of open source and
    commercial technologies.
  • Dramatically increase spam detection accuracy by replacing SpamAssassin with commercial plug-ins.
  • Boost open source performance by switching from the sluggish AmavisD, Maia and MailScanner to the high-performing MPP solution.
  • Scale SpamAssassin with distributed processing and per-user spam settings which can also be applied to any scanner you choose.
  • Cut administrative costs by allowing end-users and domain admins to easily manage their own spam settings and quarantines.
  • Customize your service offerings without having to write code using MPP’s extension and customization tools.
    Finally, it has been said that an email archive, compliance and quarantine solution is only as good the development and support team that stands behind it. Mailspect has a dedicated team of global support engineers ready to help you around-the-clock. In fact, we can solve most of your problems remotely so that you can save money, time and frustration.

    As Nick Bright, Network and Server Administrator of Terra World, stated:

    “MPP gives us the flexibility to customize features for our individual customers, the reliability in making sure our systems stay up and running, and the ability to deal with the huge problem spam has become much more efficiently and cost-effectively than any open source solution we tried.”