Results 1 to 10 of 10

Thread: Better spam handling in 5.0?

  1. #1
    jbwiv is offline Senior Member
    Join Date
    Feb 2007
    Posts
    58
    Rep Power
    8

    Default Better spam handling in 5.0?

    One of the reasons I left Zimbra was the spam handling (or lack thereof). I want to come back but would like to understand...is there going to be better spam filtering in 5.0?

    Thanks!
    jbwiv

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Quote Originally Posted by jbwiv View Post
    One of the reasons I left Zimbra was the spam handling (or lack thereof). I want to come back but would like to understand...is there going to be better spam filtering in 5.0?
    The same products are still used to filter spam and a/v. Just out of interest, why was the spam handling so bad for you?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

  4. #4
    SpecialKdkj is offline Active Member
    Join Date
    Oct 2007
    Location
    San Jose
    Posts
    27
    Rep Power
    7

    Default

    I have to say that although I'm satisfied with the results, a few of our users who have been here for years find around 5 new spam messages waiting each morning and 10-15 each weekend.

    I've upped the scores on the Bayesian filters, installed Pyzor and Razor - everything except greylisting, but our users are still complaining.

  5. #5
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Have you also tried modifying the kill/tag percentages? What about rejecting connections for unlisted recipients? Have you tried those?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    SpecialKdkj is offline Active Member
    Join Date
    Oct 2007
    Location
    San Jose
    Posts
    27
    Rep Power
    7

    Default

    For our domain, tag/kill is at 20/100 (low tag, never kill). I haven't heard about any false positives but 20 is pretty low already. Here's a sample header from an email that made it through just now:

    Received: from localhost (localhost.localdomain [127.0.0.1])
    by localhost.localdomain.com (Postfix) with ESMTP id 89A8A24622;
    Wed, 12 Dec 2007 08:25:12 -0800 (PST)
    X-Virus-Scanned: amavisd-new at
    X-Spam-Flag: NO
    X-Spam-Score: 2.775
    X-Spam-Level: **
    X-Spam-Status: No, score=2.775 tagged_above=-10 required=4 tests=[BAYES_60=1,
    DATE_IN_FUTURE_03_06=0.274, HS_INDEX_PARAM=0.001, HTML_MESSAGE=0.001,
    URIBL_SBL=1.499]
    Received: from localhost.localdomain.com ([127.0.0.1])
    by localhost (localhost.localdomain.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id VebbHG-fAWbc; Wed, 12 Dec 2007 08:24:56 -0800 (PST)
    Received: from your-vp7x3s9ctm (0-1pool250-114.nas4.duluth1.mn.us.da.qwest.net [67.1.250.114])
    by localhost.localdomain.com (Postfix) with ESMTP id EBE2D24613
    for <localuser@localdomain.com>; Wed, 12 Dec 2007 08:24:52 -0800 (PST)
    Received: from [67.1.250.114] by mail.shelldrive.de; Wed, 12 Dec 2007 14:07:28 -0600
    Date: Wed, 12 Dec 2007 14:07:28 -0600
    From: "Jeanne Bland" <linshelldrivemet@shelldrive.de>
    X-Mailer: The Bat! (v3.0.1.33) Educational
    Reply-To: linshelldrivemet@shelldrive.de
    X-Priority: 3 (Normal)
    Message-ID: <810785973.42325232274876@shelldrive.de>
    To: localuser@localdomain.com
    Subject: Please Her Tonite
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="----------95E0CA48DA4F219"

    ------------95E0CA48DA4F219
    Content-Type: text/plain; charset=iso-8859-2
    Content-Transfer-Encoding: 7bit

    What's happening Craigforget the 1 liners that dont work, just show em your c dc oc acb khttp://lg.ebaybes.com/?ouklJeanne Bland
    ------------95E0CA48DA4F219
    Content-Type: text/html; charset=iso-8859-2
    Content-Transfer-Encoding: 7bit

    <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <HTML><HEAD><TITLE></TITLE>
    </HEAD>
    <BODY>

    <html><body>What's happening Craig<br>forget the 1 liners that dont work, just show em your c<span style="FONT-SIZE: 2px; FLOAT: right; COLOR: white"> dc </span>oc<span style="FONT-SIZE: 2px; FLOAT: right; COLOR: white"> acb </span>k<br><a href="http://lg.ebaybes.com/?oukl">http://lg.ebaybes.com/?oukl</a><br><font color=#888888><br>Jeanne Bland</body></html>

    </BODY></HTML>
    ------------95E0CA48DA4F219--
    So what is interesting about this message is that in your inbox it appears to have specific language I could use regular expressions to tag but because of the style sheets that are applied it wouldn't work. These are the messages getting through - short enough that Pyzor, Razor, and other regular methods don't seem to have enough content to tag them.

  7. #7
    dotel is offline Member
    Join Date
    Oct 2006
    Location
    Fresno Ca
    Posts
    14
    Rep Power
    8

    Default

    Well I know Zimbra's spam detection is not perfect, I've had great luck with it. Some of my users might get 4-5 spams a day. But when I check the logs, you can see the 200+ they would otherwise have gotten. So I can't really complain too much.

  8. #8
    SpecialKdkj is offline Active Member
    Join Date
    Oct 2007
    Location
    San Jose
    Posts
    27
    Rep Power
    7

    Default

    Oh, I agree that it is good - like I said I have no qualms with it. But users are a different story - users expect perfection, unfortunately.

  9. #9
    dotel is offline Member
    Join Date
    Oct 2006
    Location
    Fresno Ca
    Posts
    14
    Rep Power
    8

    Default

    The only problem I find with spam filters that get 99%+ are they also get way too much valid email. When I have a user complain, I take them into my office, (and beat them with a tennis racket) no no. heheh.. I show the, how much spam is being caught by our filters. Usually they stop complaining. IF that doesn't work, you can always suggest we turn spam filtering OFF for them completely. HEHE.

    I kid I kid (kinda)

  10. #10
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    Of course marketing hype as well...but blame it on the general influx of spam Study: 95 percent of all e-mail sent in 2007 was spam | The Open Road - The Business and Politics of Open Source by Matt Asay - CNET Blogs

    Be sure to vote on:
    Bug 3870 - per user Spam Assassin score
    Bug 6953 - Per user spam white lists in the UI
    Bug 14167 - Improved spam filtering and reporting (AboutMaia - Maia Mailguard - Trac)
    Other things that would be cool:
    Bug 19152 - RFE: Spam statistics (to see graphs of exact scores)
    Captula's & challenge/response systems TmdaWiki
    Or even the very simple Bug 17404 - Allow users to create aliases for themselves (might help out a little more than the standard
    zmprov mcf zimbraMtaRecipientDelimiter +)

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Spam/Ham training under Outlook/Thunderbird/etc.
    By chuckm in forum Administrators
    Replies: 23
    Last Post: 03-18-2009, 11:01 AM
  2. .pst migration issues
    By jimklein in forum Migration
    Replies: 13
    Last Post: 02-16-2009, 01:55 AM
  3. Outlook 2007 Beta Overview
    By GregA in forum Zimbra Connector for Outlook
    Replies: 19
    Last Post: 03-03-2008, 04:24 PM
  4. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 09:59 AM
  5. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 03:39 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •