AntiSpam Guide
Stop Spam in Your Company with a Spam Firewall
from: Debbie Jacobsen
A spam firewall is a hardware device that sits between your internet firewall and LAN. It is called a "firewall" because it provides data filtering of email packets, and blocks the packets that meet the criteria of "spam". Spam firewalls can also provide anti-virus protection, anti-spyware, anti-spoofing and anti-phishing services, depending on the model you choose. A spam firewall is not designed to protect your network against intruders such as hackers - you will need a regular internet firewall for that.
Spam firewalls use a variety of methods for determining what is considered spam and filtering it out. Normally a form of blacklisting is used, which automatically filters out email from known spammy addresses. A whitelist may also be used, which allows the administrator to identify addresses or domains that should never be blocked. Keyword scanning may also be used, allowing the administrator or individual user to block emails containing certain keywords or keyword combinations. A form of message authenticity checking is also normally used to identify valid "from" addresses, check details of the entire SMTP process, or validate legitimate IP addresses.
Many spam firewall appliances also use bayesian algorithm filtering, which help the firewall block more spam over time as it "learns" what is considered spam based on message history, user input and other analysis. Incoming message flow filters also look at the number of incoming messages and where they are from, allowing them to quickly spot and stop a sudden barrage of spam emails that have been mass-distributed from the same source. Spam firewalls are very "smart" and good at eliminating the majority of spam email that comes into a network. They are not 100% effective, but many come close.
Spam firewall appliances range in price from around $2000 up to $20,000 or more, depending on the number of users it needs to protect and features. Many spam firewalls have optional features like antivirus or anti spyware. Spam firewalls need to be kept up to date with the latest data on known spam sites, new algorithms, updated filters, etc... This is normally handled by the firewall manufacturer as an auto-update feature.
As with most network appliances, an annual maintenance plan is usually purchased for the purpose of keeping the firewall up to date and performing it's best.
Spam firewall appliances use many sophisticated techniques to identify and block spam, generally with very good success. Because spammers are constantly change their techniques in order to get their junk mail past the latest and greatest spam filtering technologies, spam firewalls must continually monitor patterns and make filtering corrections.
Spam firewall manufacturers are also constantly make corrective configuration changes to keep up with the battle against spammers. For this reason, even the best spam firewall is going to filter out "good" mail from time to time. This is called a "false positive", and administrators (and users) must always be on the lookout for this. Most spam firewalls have sensitivity thresholds that can be adjusted by an administrator to help overcome false positives.
A spam firewall appliance is not your typical "set it and forget it" firewall, but the advantage of having such an appliance on your network far outweighs the need for some administrative work.
About the author:
Debbie is an information technology professional and author of Antivirus, Firewall and Spyware Resources - an informative website about computer security.
For more information, see her page on Spam Firewalls.
For permanent link to this article click here.
Related story:
Prevent Spams Today!
from: Daniel J.FoxDisabling Windows Messenger Service
Pop up spammers are exploiting a feature of the Microsoft Windows operating systems known as Messenger Service. Despite the name, Windows Messenger Service doesn't have anything to do with instant messaging. It is designed to provide users on a local- or wide-area computer network with messages from the network administrator. For example, a company's network administrator might send a message to all its users that the company's network will be shutting down in five minutes. If your home computer is connected only to the Internet, you may not have any practical uses for Windows Messenger Service. If your computer is on a business or home network, however, shutting off Messenger Service might not be the best approach. Your network ...
To read the rest of this story click here.
Antispam Best Software News
Fake antivirus extortion set to grow in 2009 (CIOL)
BOURNERMOUTH, UK: Amongst the top threats that ESET predicts for 2009 is the increasing volume and sophistication of hackers' attempts to extort money from end users in return for fake anti-malware.
Read more...Subject Lines Spammers Can't Resist (InternetNews.com)
Any time you see an e-mail with one of these subject lines, delete it without opening if you want to stay safe.
Read more...MX Logic Email Defense Named Best Antispam Product of the Year (Marketwire via Yahoo! Finance)
MX Logic, Inc. announced today that its Email Defense Service has been named Best Product of the Year in the antispam category by Everything Channel's CRN Test Center.
Read more...Sunbelt Software's VIPRE Enterprise Named Finalist in 2009 SC Awards Program (Marketwire via Yahoo! Finance)
Sunbelt Software, a leading provider of Windows security software, today announced the company has been named a finalist in the 2009 SC Awards program for outstanding achievement in information technology security.
Read more...