[c-nsp] OT: Best Online Antispam Service

Thu Jul 2 09:33:49 EDT 2009

I've been using Forefront Online Security for Exchange (formerly
Exchange Hosted Filtering, formerly FrontBridge) for a number of years.
We find it works extremely well.  It is store and forward (they will
store for 5 days if your MX goes down).  Last year we had a few issues
with handoffs to the service from a limited set of clients (but these
self resolved in 4-5 hours).

> Also, all the spam I get is 'from me'. I would think that if a message
originates out on the public internet >that is from me, to me, not
originating from our SMTP server would be looked at a little closer?

In FOSE you can set a policy to block this kind of stuff.  It is
actually part of their best practices config guide.

Thanks,
Erik

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Jeff
Wojciechowski
Sent: Thursday, July 02, 2009 9:15 AM
To: Maxwell Reid; Cisco-nsp
Subject: Re: [c-nsp] OT: Best Online Antispam Service

We just cut over to Postini a few months ago and there have definitely
been some quirks.

Awhile back we had a mail loop where one message that keep spooling back
and forth between Postini and us that kept getting a few k bigger each
trip back and forth and eventually swamped out our entire internet
connection. Don't recall what our mail admin had to do to stop the loop
but the Postini tech was useless. Thank goodness for Netflow or I would
have never figured out what the heck was going on.

Also, all the spam I get is 'from me'. I would think that if a message
originates out on the public internet that is from me, to me, not
originating from our SMTP server would be looked at a little closer?

So there are a few gaps.

Naturally this is better than when I worked for a dial-up ISP with ~ 500
customers. We used Declude and I had to manually sort mail that the
didn't fall into the "probably not spam" or the "probably spam" buckets!

-Jeff

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Maxwell Reid
Sent: Wednesday, July 01, 2009 8:58 PM
To: Cisco-nsp
Subject: Re: [c-nsp] OT: Best Online Antispam Service

Our experience with Postini was pretty good until Google bought them  
out.  When that happened some of postini's 'quirks' became more  
apparent (black holed mails) and the service sorta went down hill from  
there.

I'd recommend using a provider more *focused* on email that hasn't  
been bought out by a giant advertising firm or getting an appliance /  
rolling your own system.

I'd point out that Postini et. al. don't really save you that much in  
terms of bandwidth.  They aren't generally setup as store and forward  
services,  they operate by opening  a backend proxy connection to your  
mail server anyway, so you'll see header traffic, and most spam is  
relatively small fry byte wise.  If you're starving bandwidth wise,  
traffic shaping and ratelimiting are better options.

Also, if you're an ISP, they won't solve the problem of outbound  
scanning; that only applies to Enterprises.

~Max

On Jul 1, 2009, at 3:19 PM, Paul Stewart wrote:

> Yeah, Postini is what we use today... been very good to date.  Service
> Provider pricing you can get them much more aggressive in pricing  
> depending
> on volume.  I believe we're doing about 35,000 mailboxes today with  
> them -
> overall pretty happy.
>
> Paul
>
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of MIchael  
> Schuler
> Sent: Wednesday, July 01, 2009 3:03 PM
> To: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] OT: Best Online Antispam Service
>
> I've had some really phenomenal experience using Postini.  It's  
> pricing is
> extremely reasonable at 12/year per user for just spam/virus  
> filtering.  It
> can do SMS/email alerts of host down and spooling until the server  
> comes
> back up.  The firm I work at uses it for about 1700 users and I have a
> client I support of about 30 users that use it with extremely great  
> results.
> Easy for users to use.  Easy to implement for inbound and outbound  
> scanning.
>
>
> On 7/1/09 4:46 PM, "Sean Granger" <sgranger at randfinancial.com> wrote:
>
>> After a rocky start w/ false positives, we've had a decent go of  
>> things
> with
>> MXLogic.
>> They're consistently improving value to the service by adding
> functionality.
>>
>>>>> Felix Nkansah <felixnkansah at gmail.com> 6/30/2009 5:56 PM >>>
>> Hi Team,
>> I am interested in subscribing to a GOOD online email filtering  
>> service,
>> through which all emails destined to an enterprise domain transit,  
>> are
>> scanned and filtered for spam and viruses, before legitimate mails  
>> relayed
>> to the destination mail server.
>>
>> As a bonus, the service should also store emails for some time if the
>> destination mail server is down.
>>
>> Much as IronPort and Barracuda appliances do a good antispam job,  
>> they are
>> typically placed onsite for which reason the network bandwidth  
>> still gets
>> chocked with arriving spam.
>>
>> Please share your experienced recommendations with me on this one.  
>> It's
>> better for me than following google search.
>>
>> Felix
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/