PDA

View Full Version : ISP Outgoing SPAM/Virus filter?


jrquint
03-26-2008, 12:19 PM
I have been testing untangle for a few weeks now and I'm fairly impressed with its ease of use and setup.

I'm testing it specifically for use as an OUTGOING spam/virus filter.
We have a solution for incoming spam(maybe not anyones favorite, but its in place and cost $$$ so no one wants to replace it). We need a system to limit spam emanating from out network(we are a small ISP) as we get blacklisted once in a while if one of our customers gets 'zombied' or a virus starts spewing email. Our SMTP server has a rate limit, but the zombies can easily outsmart this.

I set up a test network and started sending messages out through Untangle(5.0) and it did log and score the email. The most I could get out of an email was a score of 2.7. I set the filtering to extreme and it simply would not block or tag ANY email.

Am I barking up the wrong tree with this product? I like its transparentness and ease of setup, but it seems a bit oversimplified. With the proper hardware will this handle a fair load(we get about 400,000 messages/day incoming, but not near that many outgoing and this will only see outgoing) ?

christr
03-26-2008, 02:12 PM
Were you actually trying to send email thru that looked like spam?

find a nasty piece of spam, and try sending it to like 1000 random email addresses and see if it gets flagged.

My untangle box is currently blocking on average 340,000 pieces of spam a day on 'medium'.

--chris

jrquint
03-26-2008, 02:18 PM
That's basically what i did, maybe not a nasty enough piece of spam :)
But the event log did score the spam at 2.7, so I'm not sure how high "extreme" really is.

The 340,000 messages that are quarantined on yours is that incoming/outgoing or just one or the other? That is an encouraging number!

amac
03-26-2008, 04:45 PM
It will handle the load I think, my question is what is the version that you are running on?