[Dshield] Anti-Spam Enterprise Products

Deb Hale haled at pionet.net
Wed Oct 13 13:42:35 GMT 2004

I have used Postini for almost 2 years now with great success.  I check my
Postini at least 3 times a day to insure that there is nothing that has been
quarantined that I need.  (You can approve anyone or domain that you want to
receive email from).  My spam is virtually been eliminated (still a few that
get in - usually the ones that look like I sent them to myself).  I really
am happy with Postini.


-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Kenneth Coney
Sent: Tuesday, October 12, 2004 1:10 PM
To: list at lists.dshield.org
Subject: Re: [Dshield] Anti-Spam Enterprise Products

I have had some very negative experiences with Postini.  Not the least of
which was it's tendency to hang up the Dshield messages in the Postini virus
box when fragments of the virus coding were posted.  The McAfee filter it
uses was incapable of realizing that a text abstract of a virus fragment was
not the same thing as an infected email.  Likewise, on more than one
occasion important mail from customers was flagged as spam and trapped.  A
less than one percent error rate is NOT negligible if the trapped email
involved an offer of a six figure contract and Postini decided to trash it.
Much, much smarter IMHO & E is to simply create a filter of your own coding
that auto sorts and deletes any email in your in box from a foreign country
based IP that you don't do business with.  It requires spending some time
doing some research, but the reward of no spam is worth the trouble.  US
originated spam to a US recipient seems to be less than 3% of the total and
is often easily fixed by notifying the appropriate person.  If you don't do,
or anticipate doing, business with firms located in China, Mespotamia,
Brazil, Korea, etc., then why are you accepting emails from IPs located
there?  If do business with someone overseas, then find out their
originating IP and make your program flexible enough so  you can block
everything from (for instance) 220. except  Much better than
paying someone to filter your email.

Re: [Dshield] Anti-Spam Enterprise Products
dave brookshire <dsb at parapet.net>
Mon, 20 Sep 2004 22:45:32 -0500

General DShield Discussion List <list at lists.dshield.org>

We're about the same size, and have a very technical systems staff, but
we've decided to spend our time on more interesting things.  So, I checked
around for various out-sourced solutions, and chose Postini.  I have been
pleased ever since.  The roll out is quite simple, and it's easy to include
a few users (say, as in a pilot) or the entire org. 
They even have a nifty scripting interface that allow you to manage things
through whatever you'd like (we have some scripts which populate new users
from our LDAP server to Postini.)

It's rare that I've really been happy with an outsourced solution, but I am
(and our user base is) very pleased, indeed.

Also, rates are pretty reasonable, particularly for an org our (and
your) size.

DShield and the Internet Storm Center are sponsored by the SANS Institute.
To learn more about current SANS training, see http://www.sans.org .

send all posts to list at lists.dshield.org To change your subscription options
(or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list

More information about the list mailing list