about anti-spam for enterprise

[Anthony M Simonelli]

We currently are using a Debian server for our email filtering.  We use
a combination of Spamassassin, SARE, Anomy Sanitizer, ClamAV & Postfix
to protect our old Exchange 5.5 mail server.

Emails are subjected to RBL, header, body and access list checks by
Postfix, followed by attachment and HTML email scanning/sanitizing using
Anomy Sanitizer and ClamAV, and lastly the content of the email filtered
using Spamassassin and SARE.  Was using Bayesian filtering but that was
too much upkeep and spammers were poisoning it.  We keep a lot of spam
email out of inboxes and have had very few false positives.  Results may
vary but, once set up, sure beats dropping $2K to $5K on an appliance
and a years worth of updates, and only for 40 users at my company.

The bulk of our setup is modeled from here (PDF available here too):
http://advosys.ca/papers/postfix-filtering.html

Other useful sites:
www.spamassassin.org
www.rulesemporium.com
www.postfix.org
www.debian.org
www.debian.org/volatile/

On Tue, 2007-06-26 at 09:40 +0200, Luca Ferrari wrote: 
> Dear all,
> apologize me if this is not a technical post, but I'd like to get your opinion 
> about this. I'm going to set up our enterprise mailserver (of course an 
> ubuntu!) to get out the spam e-mails. Now I've got two choices:
> 1) set up an environment (like spamassassin)
> 2) buy an antispam appliance
> 
> Now I think that setting up a software environment could work as weel as a 
> commercial appliance, but I'd like to know if it get too much time to 
> configure it to reach good results.
> Since I've not experience on this, I'd like to know your opinion about how to 
> start.
> 
> Thanks,
> Luca
>