server side spam filtering

[rcjordan]

I'm currently running a test of one of the client side pop3 spam screening programs (spameater. I'd rate this one "B") and, while it's doing a good job, it still requires some tending. Since mail handling is done on my own server I'm thinking that some filtering functions could be scripted on the server and be made totally transparent (such as nuking everything with "mortgage" in the subject line). Anybody know of one?

While I'm making my filtering wish list, I'd like to be able to filter or preview attachments at the server.

[rcjordan]

Nothing, huh?

I just ran across this article today, it's an excellent overview of the state of spam in the industry and the sidebar has some hardware and software solutions. However, all I can find on the above quest are enterprise solutions, Symantec's Mail-Gear being the least expensive annual license (around $200 according to the small business license qoute page).

Spam: It's completely out of control
[zdnet.com.com]

Stop paying for email spam [techupdate.zdnet.com]

[toadhall]

My ISP has written and employed a server-side spam filtering program called PEP [islandnet.com].
Unfortunately it's only available to their clients.
But perhaps the overview at that link could give some hints for building your own.
Or perhaps they could be talked into a license agreement.

[bird]

You say nothing about your server platform.
On unix boxes, procmail is kind of a de-facto standard, though it's not exactly trivial to configure. There are probably others like it (or simpler) around, but I'd have to search for them too.

My procmail configuration file is more than two pages long, and filters about 98% of the spam into an extra mailbox for review. I then just skim over this box once a day, to make sure that I didn't filter out anything legitimate, and delete the rest (takes about a minute).

You probably already know that every spam filter will need constant attention, so the "totally transparent" bit may be realistic for end users, but certainly not for the administrator.

[rcjordan]

>platform

Oops. Sorry, bird, it's solaris.

>transparent

I'm realistic. I aggressively filter now on the client side and have a finely tuned list that kills the vast majority. Heck, here in the US just filtering the words "mortgage" or "credit" would nuke half of the junk.

Procmail config, eh? I'll check into it.

[rcjordan]

Might be getting somewhere... junkfilter [junkfilter.zer0.org]