email filtering

Submitted by rflores on Thu, 02/12/2009 - 1:13pm.

Hello Teknoids,

 

We are currently running a barracuda 300 box to handle email
filtering, this works great.  We filter out all suspect email (around 70%
of all email) and only deliver filtered email so that our users do not have to
wade through the glut of spam.  Every once in a while (2-3 times a month)
there is a false positive.  A user calls us we can then check the logs
which go back 30 days and release any email that was falsely held up. 

 

Our central university IT is implementing a new spam
filtering policy that will filter all email at the border.  The
unfortunate part is that this email will be dropped immediately with no ability
to trace for false positives.  This will be a big step back for us and
will no doubt frustrate our users. 

 

The central university has agreed to modify our mx records
so that email is delivered directly to our servers.  We are looking at the
possibility of upgrading our barracuda box with redundancy to handle the
additional volume or using a third party service like Google Email Security
(Postini).  I was wondering what other schools are doing and what works
for them.   Your input is greatly appreciated.  Thank you.

 

Ray

( categories: teknoids )
Submitted by gmathes on Thu, 02/12/2009 - 1:13pm.

Ray,

 

Our parent university filters at the edge
with Sophos.  This allows each user to log in via the web using their A/D
credentials to manage their white and black lists, and to locate and release
quarantined messages.  Blocked attachment types are stripped from any messages
that contain them, and these attachments are not retrievable.  The Sophos
solution also allows users to opt out if they so choose, effectively
white-listing everything, although blocked attachment types would still be
stripped.

 

So far this has worked fairly well for us. 
It’s not 100%, but then again, what is?

 

Greg

 

Greg Mathes, Chief Technology Officer

University of the Pacific, McGeorge School of Law

3200 5th Ave. Sacramento, CA 95817

(Office) 916-739-7224

(Fax) 916-739-7388

From:
teknoids-bounces@ruckus.law.cornell.edu
[mailto:teknoids-bounces@ruckus.law.cornell.edu] On Behalf Of Butler,
Jamie
Sent: Tuesday, February 03, 2009
9:38 AM
To: Teknoids
Subject: [teknoids] RE: email
filtering

 

Hi Ray,

               
We are using an Exchange Front-End server for all spam and antivirus
filtering.  Messages get routed to the campus, hit a very loose set of
rules, and then get delivered to us.

 

               
If you have the Microsoft Campus Agreement, you can route email through their
hygiene services for free. 

 

Hope this helps.

 

Jamie Butler

Director of
Information Technology

UC Davis School of Law

(530) 752-6012

href="mailto:jebutler@ucdavis.edu">jebutler@ucdavis.edu 

 

UC Davis School of Law - 40 Years of Excellence,
Leadership, and Community

 

From:
teknoids-bounces@ruckus.law.cornell.edu
[mailto:teknoids-bounces@ruckus.law.cornell.edu] On Behalf Of Raymond Flores
Sent: Tuesday, February 03, 2009
9:26 AM
To:
teknoids@ruckus.law.cornell.edu
Subject: [teknoids] email
filtering

 

Hello Teknoids,

 

We are currently running a barracuda 300 box to handle email
filtering, this works great.  We filter out all suspect email (around 70%
of all email) and only deliver filtered email so that our users do not have to
wade through the glut of spam.  Every once in a while (2-3 times a month)
there is a false positive.  A user calls us we can then check the logs
which go back 30 days and release any email that was falsely held up. 

 

Our central university IT is implementing a new spam
filtering policy that will filter all email at the border.  The
unfortunate part is that this email will be dropped immediately with no ability
to trace for false positives.  This will be a big step back for us and
will no doubt frustrate our users. 

 

The central university has agreed to modify our mx records
so that email is delivered directly to our servers.  We are looking at the
possibility of upgrading our barracuda box with redundancy to handle the
additional volume or using a third party service like Google Email Security
(Postini).  I was wondering what other schools are doing and what works
for them.   Your input is greatly appreciated.  Thank you.

 

Ray