11 Anti-spam Products Tested 200
An anonymous reader writes "When we achieve world peace, that's when we'll get the perfect anti-spam solution. In the meantime, ZDNet has a comprehensive review of eleven of the latest anti-spam products including solutions from BitDefender, Clearswift, CA eTrust, GFI, IronPort, MailGuard, McAfee, MessageLabs, NetIQ, Network Box and Symantec Brightmail."
SpamBayes? (Score:5, Insightful)
Re:SpamBayes? (Score:2, Interesting)
SpamBayes... (Score:5, Insightful)
Re:SpamBayes? (Score:5, Insightful)
Mod parent up (Score:2)
Re:Mod parent up (Score:3, Funny)
Re:SpamBayes? (Score:2, Funny)
Enterprise solutions (Score:2)
Well, the linked article significantly uses the adjective "enterprise", but the /. description doesn't. So I'm less surprised now. I use SpamBayes and it's been great.
SpamAssasin (Score:2)
Another glaring omission: http://death2spam.net/ [death2spam.net]. Very effective (almost 99% for me).
My stats (as of the time of this post):
Re:SpamBayes? (Score:5, Interesting)
Regards,
Steve
Re:SpamBayes? (Score:2)
What happends there is the irre
Re:SpamBayes? (Score:2)
but I WANT spam... (Score:3, Funny)
Re:but I WANT spam... (Score:2, Funny)
To quote Family Guy... (Score:2)
Yawn - No OSS (Score:5, Insightful)
Where are the OSS products? No Spamassassin?
Some review...
Re:Yawn - No OSS (Score:2, Interesting)
Re:Yawn - No OSS (Score:2, Insightful)
And yet - if true - this (and OSS) gets no mention in the review.
And nobody on the review team thought of this?
Re:Yawn - No OSS (Score:5, Informative)
Re:Yawn - No OSS (Score:3, Interesting)
Re:Yawn - No OSS (Score:2)
Use linux to protect exchange (Score:3, Insightful)
Re:Use linux to protect exchange (Score:2)
Re:Yawn - No OSS (Score:2)
Amavisd-new can use a whitelist/blacklist in a DBMS for easier web based management (inclding per user ones), and is quite effective at cacthing spam.
The best part is that except for the whitelist/blacklist management this is totally transparent to the user, who can use whatever folder sorting mechanisms they like on Exchange.
Re:Yawn - No OSS (Score:2)
Re:Yawn - No OSS (Score:2)
My solution? Simply configuring sendmail to use SORBS [sorbs.net] ( Spam and Open Relay Blocking System) stopped 98 percent of my spam traffic right there.
Using SpamAssassin really just blocks anything left over. I'm lucky to see a single peice of spam once a week.
Re:Yawn - No OSS (Score:2)
1) commercial support (this was most helpful in getting it integrated into our MS Exchange environment)
2) easy installation (with great docs and support)
3) great web interface for admins (and users if you want them to manage their own filters)
4) database integratio
Re:Yawn - No OSS (Score:2)
SpamAssassin (Score:5, Insightful)
Re:SpamAssassin (Score:5, Insightful)
How about:
``Open Source solutions will never gain the market share they deserve if media never gives them the attention they deserve. And the media will never give them attention until they [the Open Source solutions] start spending big bucks advertising with the media''.
No chicken-and-egg stuff here: I would bet that ZDNet is following thier long-standing policy of reward^H^H^H^Hviewing their advertisers' products.
Re:SpamAssassin (Score:5, Interesting)
Most businesses want to BUY something to fix their spam problem and not try to fix it themselves. There are exceptions to that rule, but by and large IT managers are already busy enough and just want someone or something else to fix their spam.
I know this because my company (MailGuard) is one of those in the review. And no, we don't spend huge $$$ on advertising with ZDnet; we were invited to submit for the review, as I imagine were all the other vendors. Remember -- there are two worlds out there. Businesses will often recognise and implement Open Source solutions, but businesses also like to engage other businesses to handle non-core problems for them.
Re:SpamAssassin (Score:2)
Spam Assassin comes up on the first page of a google search for spam, so I assume they have at least heard of it. Having found the web page it's a simple matter to send an email to the mailing list inviting a submission from the developers.
Assuming they didn't (and I think that a safe assumption) I would like to know why they didn't. Is it because Spam Assassin is open sourc
Re:SpamAssassin (Score:2)
True that, but there are commerical products that use OSS stuff that they didn't mention, like Roaring Penguin Software [roaringpenguin.com]
Re:SpamAssassin (Score:2)
Spamassassin+Sendmail (Score:5, Informative)
Re:Spamassassin+Sendmail (Score:2)
Bah, you don't count. My personal email at home dropped from 1,100 spam messages to about 200 spam messages per week when I wrote a postfix greylisting engine recently.
Mind you, that's 1,100 messages that were making it through various RBL kinds of things. The 1,100 did count things that spamassassin caught, but there was a pretty good thing that my client's Bayesian filter had to deal with in there, too.
I'm not looking forward to s
All expensive, why not... (Score:2)
More features, better performance, better uptime, lower cost.
Uhh (Score:4, Insightful)
Re:Uhh (Score:4, Insightful)
Re:Uhh (Score:2)
Re:Uhh (Score:2)
you can do it yourself... for free (Score:5, Informative)
Alternately, check out MailScanner [soton.ac.uk] for one-stop mail sanitization, virus checking, and spam filtering.
Re:you can do it yourself... for free (Score:4, Informative)
Re:you can do it yourself... for free (Score:2)
Re:you can do it yourself... for free (Score:2)
I never did get the tar-pit set up in exim, but I like the concept of tieing up the senders.
BOFH-grade products. (Score:5, Funny)
How can this list be considered even remotely complete? What about the personalized Louisville Slugger [sluggergifts.com], the noble etherkiller [fiftythree.org] and (for your Tier 1 types who work in volume) the 1200-bung-per-hour-rated Jarvis Sow Bung Dropper [technex.pl]?
Oh, wait, this is a review of anti-spam products, not anti-spammer products. Never mind.
Xwall rules (Score:4, Informative)
Spam "products" (Score:3, Insightful)
Re:Spam "products" (Score:2)
(I know, I had to evaluate them all recently! Grr... Told 'em OSS was the way to go...)
ZDnet = paid promotion (Score:2, Insightful)
...ZDNet reviews products for WINDOWS (Score:4, Interesting)
Re:...ZDNet reviews products for WINDOWS (Score:2)
Re:...ZDNet reviews products for WINDOWS (Score:2)
Sure...but how many are behind *nix mail gateways?
Re:...ZDNet reviews products for WINDOWS (Score:3, Interesting)
Postfix gateway + Exchange 2003 server = corporate email bliss.
Re:...ZDNet reviews products for WINDOWS (Score:2)
Results (Score:4, Informative)
Software winner: Symantec Brightmail, for ease of installation, configuration and administration as well as an excellent user interface and detailed "live" graphical reporting it would be hard to surpass these features.
Managed Service winner: Network Box, if security is a concern then Network Box has the bases covered, if availability and redundancy are your preferred choice then a trial of either MailGuard or MessageLabs may be on the cards.
Appliance winner: IronPort, strong security, redundancy and recently developed ease of installation with the new GUI make this appliance the choice in this review. For those with a tighter budget then perhaps one of the McAfee WebShield appliances may be considered and are still very worthy contenders.
The catch... (Score:4, Insightful)
I'm sure everyone is just amazingly psyched about an "ultimate" anti-spam guide that makes no effort to determine if the products they are reviewing (let alone proclaiming as the "winner") actually stop spam.
Of course, I guess this kind of article is developed to benifit CIOs with no technical experience, who just want something to tell the IT department to install. (Thus: price and ease of installation are far more important than it actually doing what it is supposed to.)
No POPFile? (Score:3, Interesting)
Re:No POPFile? (Score:3, Informative)
John.
Re:No POPFile? (Score:2, Informative)
Is this for real? (Score:5, Interesting)
I don't know about everyone else, but I'd expect a little more out of a product that costs thousands to implement. With a little research and dedication my SA 3.0.1 setup has no problem spanking those numbers.
I'm also assuming that none of these products produced extremely stellar results. The article never mentions any statistics based upon corpus runs for any of them. This is nothing more than TLA eyecandy...
Re:Is this for real? (Score:2)
The fact that they then quote ridiculously low percentages for spam recognition (when they should be aiming in the 95-99.9% bracket) and don't mention ANY of the problems of spam filtering such as fals
I use none of these, and still get no spam (Score:2, Interesting)
Re:I use none of these, and still get no spam (Score:2)
Heh well, there ya go. Good on you. Hey, I've got an email address I never use, too, and somehow it doesn't get spam either. It's amazing.
Free? (Score:3, Informative)
My company uses mxlogic.com. $1.25 per mailbox per month. At 60 people, that's WAY cheaper than my time to administer anything. I havn't heard a peep of a complaint from users after switching. Before were using a device (eSafe by Alladin systems). It was taking up to an hour/day of my time. And it wasn't free.
Just remember to include admin time when working out 'free'.
What's this? (Score:2)
Is this the kind of corporate crap people get in Australia? If so, I seriously feel sorry for those who live there...
Re:What's this? (Score:2)
There's quite a few others in Australia but not all of us care to advertise with them.
As a shameless plug, http://xamime.com is actually Australian made and sold globally, though it's more of a content-management system as apposed to
Paul.
Brightmail works great (Score:5, Informative)
I wrote the original sendmail milter interface to Brightmail that they derived their milter software from. We still run my milter because I've added additional options over time; Brightmail includes an SDK that you can use to interface to custom setups easily.
Re:Brightmail works great (Score:2, Informative)
Re:Brightmail works great (Score:2)
Re:Brightmail works great (Score:2)
I've got some custom rulesets that apply extra strict limits to hosts listed in the MAPS DNSBLs; there is no point in allowing 10 or 100 connections from someone when we're just going to reject the mail anyway.
Re:Brightmail works great (Score:2)
They Forgot... (Score:3, Informative)
Re:They Forgot... (Score:2)
How are you protecting your outgoing SMTP traffic? Barracuda doesn't act as an SMTP AUTH Proxy. Are you leaving port 25 open and just not pointing an MX record to it, or are you using some other firewall for outboung SMTP?
Link: http://www.barracudanetworks.com/ [barracudanetworks.com]
Re:They Forgot... (Score:2)
ASSP website (Score:2, Informative)
Been using it for a little over a year now and it rocks. We receive something like 10,000 emails a day--%70 of which is spam. Of those, perhaps 20-30 spam messages actually get through, which is pretty good. Also features extremely low false positives. I'm only aware of perhaps 3 during the course of the entire year. A valid user from a valid domain should get a bounce-back message explaining that their message was rejected as spam-like with brief instructions on alternate method
What we really want to see: (Score:3, Funny)
The test is stupid! (Score:2, Insightful)
MailScanner! (Score:3, Informative)
*Not* accuracy tested (Score:2)
So - exactly why would anyone waste more than two seconds on these reviews? Just so we can find out what they think of the GUIs and how easy they are to install .. without an analysis of how effective they are at blocking spam? What crap.
Freeware... (Score:5, Informative)
Also, their reviews were pretty shallow, I would expect at least to know how am I to connect to this spam filter, there are numerous ways, some better, some worse.
My filter of choice! (Score:2)
It's a Beauty Pagent (Score:2, Insightful)
Testing? (Score:2, Insightful)
or the MS exchange 2003 only product got 2.5 stars and many others got 3?
Every product review is like, it installs easily, and
Not exactly comprehensive (Score:2)
I guess they can't have been keeping up with their 'protection' payments.
Use them all! (Score:2)
Trivial Spam Control... (Score:2)
Not quite "ultimate" ... (Score:3, Informative)
Missed all of IronPort's competitors (BorderWare, Barracuda, CipherTrust).
Missed Postini, the managed Spam services leader.
I'd start with MetaGroup, Gartner or somebody like that to get a list of what the options really are ...
send them feedback (Score:2, Informative)
doh (Re:send them feedback) (Score:2, Informative)
Don't just grumble, do what I did and send them feedback.
Send a note to zdnet
sales@zdnet.com.au
ads@zdnet.com.au
prin t sales@zdnet.com.au bigail.baker@zdnet.com.au sally.slarke@zdnet.com.au
CC the author/editor:
edit@zdnet.com.au
While you are at it, CC the manager of RMIT IT Test Labs who did the testing: stevet@rmit.edu.au
Or if you want, post zdnet feedback to the article:
http://www.zdnet.com.au/insight/software
Doesn't even cover all the major commercial stuff. (Score:2)
My office (an ISP, with about 5000 email addresses) uses a Barracuda [barracudanetworks.com] 400.
It's a nice 1U rackmount system, dead simple to integrate into most SMTP networks (just one DNS change and you're done), works well (internally, it's basically a somewhat-tuned version of SpamAssassin), great for the end-users (integrated Web interface for adjusting settings, handling quarantined emails, etc.). And cost-effective (the 400 was under $5k from our re
Why don't they understand? (Score:2, Interesting)
It destroys the rep of your company totally! But in most cases spammers don't care.
BUT
they should understand that is quite hard to get thru, so that the victim would even bother to open it. SPAM is destroying, and eating the net alive.
One finnish professor said not so long ago, that internet will die 2006 because of spam. is he right or not, i don't know, but we are definately heading to that way!
He said that spam would exceed by that s
This is no more than an ad. (Score:3, Interesting)
MailScanner [mailscanner.info]
MIMEDefang [mimedefang.org]
SpamAssassin [spamassassin.org]
BayesIt! for TheBat! (Score:2)
Oh, and apparently the plugin was so popular that Ritlabs included it in the latest versions of TheBat!.
The Test Lab Response. (Score:5, Informative)
Love all the comments !! And despite popular belief I did not get my 2 year old son to write the review.
Reading through them it seems to me there is definitely a few misconceptions that need to be cleared up, so hopefully this may sort a few things out. Then again it may not!
Before we begin down this path I appreciate your patience in getting through this abnormally large post, but it is better to deal with the comments on a whole rather than one by one.
1. We are the RMIT Test Lab, based in Australia, we are a totally separate organization from the magazine who is one of our clients, they contract us to perform three independent technology reviews every month on products that they invite the vendors to submit. The RMIT Test Lab will have been performing independent magazine reviews for 16 years in January 2005. We have certainly produced a hell of a lot of words over that time. For more information on the RMIT Test Lab hit www.testlab.rmit.edu.au The vendors don't pay the Lab one cent to have their products tested for the magazine reviews.
2. For all you Open Source buffs out there, you know who you are! The magazine creates a list of what technologies will be tested approx. six months in advance, one and a half months before going to press the magazine issues invites to various product vendors to submit product(s) to us at the lab for testing, this is generally accompanied by a "scenario" which is set by the magazine to ensure that the vendors stick to certain criteria and submit products of a certain caliber/type and not all eight products that they may have in their inventory which fits into that review category. Therefore it is the magazine who invites the vendors, not the Test Lab nor the reviewer. Basically we have no control over which vendors are invited to submit and at the end of the day every single vendor could not possibly be reviewed, there will always be some who cant submit, wont submit, have not been invited or don't have Australia as a target market. So don't blame us for not including Spam Assassin or any of the other 100's of commercial and open source Anti-Spam solutions that are out there. Also note that a review we have recently completed and submitted "E-Mail Clients" for the next edition of the magazine contained several Open Source products, and a review we have just commenced "Internet Browsers" also contains several Open Source products too. So before pulling out the "Paid for Results" and "Advertising Driven" and "Open Source Bashing" comments think again and take a look at a few of the other reviews we have performed.
3. We are fundamentally IT engineers who design and execute testing frameworks, methodologies and create reports, we just happen to have a very very small modicum of writing ability, we are by no means trained journalists "out for the scoop" or trying to generate traditional "media hype" around varying technologies. We report things as we see them. We are also very experienced in testing these technologies; in fact the majority of the work the lab is contracted to perform is private testing for corporate clients and vendors/manufacturers/developers. Therefore we will not "test" where others try unless the test will provide valid worthwhile results that we will stand behind happily. The fact that we are not journalists means that the Magazine's editorial staff have their work cut out editing our reviews while still maintaining our individual writing styles and the basic concepts of what we are trying to deliver, sometimes it is successful sometimes less so. An example for you is that the review we submitted on Spam was 7,049 words long (25 A4 pages in Word, or Writer, with screen shots and images). And that does not even include the features table or the overview table. The space available for that edition of the magazine was less than 3000 words. Therefore 4000 words had to be lost. We don't get to see the finished product until it is published. Overall I personally feel that the review turned out
Re:The Test Lab Response. (Score:2)
It depends what definition of "ultimate" one uses - hopefully ZDNet meant "ultimate" as in "last". I just posted to their feedback section (prior to reading this post) that by describing the article as "ultimate" belittled the tests which were carried out.
Hopefully in future ZDNet will continue contracting the testing to you guys, and will start contracting their journalism to, you
Re:The Test Lab Response. (Score:2)
A quick question for you folks: Do you (or someone else reading this) have the list of what products were asked to send in a test? That would tell us whether the culprit was ZDNet or disorganized open source projects.
Re:IM better than that (Score:2, Insightful)
You can do that with email, too; block everything not explicitly whitelisted.
IM has no advantage here.
The ratings all in one place (Score:5, Informative)
Interoperability: 2.5 Futureproofing 3 ROI 4.5 Service 4.5 Rating 3.5
Product Clearswift MIMEsweeper for SMTP 5.0
Interoperability 3 Futureproofing 4 ROI 4 Service 2 Rating 3.5
Product CA eTrust Secure Content Manager v1.0
Interoperability 4 Futureproofing 3.5 ROI 3.5 Service 5 Rating 4
Product GFI Mail Essentials v10.1
Interoperability 3 Futureproofing 3.4 ROI 4 Service NULL Rating 3.5
Product IronPort C30
Interoperability 3 Futureproofing 4.5 ROI 3.5 Service 4 Rating 4
Product MailGuard
Interoperability 3 Futureproofing 4 ROI 4 Service 3.5 Rating 4
Product McAfee SpamKiller & WebShield
Interoperability 3 Futureproofing 3.5 ROI 3.5 Service 4 Rating 3.5
Product MessageLabs AntiSpam Service
Interoperability 3 Futureproofing 4 ROI NULL Service 3.5 Rating 4
Product NetIQ MailMarshal SMTP 6.0.3.8
Interoperability 4.5 Futureproofing 4 ROI 4 Service NULL Rating 4
Product Network Box Internet Threat Prevention System
Interoperability 3 Futureproofing 4 ROI 5.5 Service 5 Rating 4
Product Symantec BrightMail AntiSpam 6.0.1
Interoperability 4 Futureproofing 4.5 ROI 4 Service NULL Rating 4.5
It looks as though Network Box Internet Threat Prevention System did the best. Several items have NULL in a category beecause the editors did not have enough information to rate the product on in that area. This post brought to you by Centum because my average charachters per line were too low. You know how silly that is?
Re:missing (Score:2)
If you're not gonna RTFA, at least read the summary, or even the headline!