RE: SORBS



Hi

We went for the managed service solution from messagelabs.com which really
did a wonderful job in blocking spam using different methods , and in
scanning/blocking infected messages that includes scanning against (
viruses, worms, Trojans..etc)

Also in case that your entire messaging infrastructure became offline...they
can hold the undelivered messages for 7 days as a form of DR.

Cheers;

Omar Sherin
Systems Engineer
MCSE.MCSA (windows 2000)
IM Department
Egyptian Liquefied Natural Gas (ELNG)
Mobile: 010 1718304 / 012 1750337
Tel: +202 265 0480 ext: 2279
Fax: +202 768 5280 / Direct : 02-7685279


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of Robertson, Seth (JSC-IM)
Sent: Friday, January 05, 2007 5:46 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: RE: SORBS

If you have the budget, you might consider affordable products that
feature many different public blocking list services (like SORBS),
heuristics, and bayesian analysis--all using genetically-tuned weights.
That way, no single keyword or blocking list will cause a message to be
"blocked". These products also offer you features like a quarantine (so
a user can retrieve a message that was blocked if it shouldn't have),
anti-virus, content filtering, and auto-encrypted email (e.g., for HIPAA
compliance). I'm afraid that blocking messages due to the listing in a
single block list service is going to yield poor results (plenty of
false positives and false negatives).


http://www.espionintl.com
http://www.barracudanetworks.com
http://www.ciphertrust.com/products/ironmail/


Seth Robertson
IT Security Forensics Specialist


-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of mbs
Sent: Thursday, January 04, 2007 3:23 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: SORBS

I am considering setting up our Exchange servers to use some sort of
SPAM blocking list service. SORBS sounds like the wrong choice. Are
there any better options, or should I just learn to love deleting SPAM?

Michael

Dan Tesch wrote:
That organization is un-believable, good luck! I spent at least 40
hours over the course of a month or two trying to get a domain off
their list. Seemed like every time I passed one of their criteria,
there was something else wrong. It came down to the fact that the
server IP was in a block of SBC addresses that they didn't like how
they were configured.

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx] On Behalf Of policysup@xxxxxxxxx
Sent: Tuesday, January 02, 2007 2:20 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: SORBS

In trying to get de-listed from SORBS I get:
" the someone is lying, pay the fine response."

A friend once said: "

Life is so much easier when you assume that anyone who disagrees with
you is evil. Cuts down on the need to take responsibility or do any
real objective thinking.

------------------------------------------------------------------------
---
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetec
t
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------


___________________________________________________________________________
DISCLAIMER: Information contained in this e-mail and in any of its attached
files, including replies and forwarded copies, is confidential and intended
solely for the addressee(s) and may be legally privileged or prohibited from
disclosure. If you are not the named addressee, you are on notice of its
status and may not use, copy or disclose this information to any other
person. To do so could be a breach of confidence and unlawful. If you have
received this message in error then please return this message by reply
e-mail to the sender immediately and delete all copies of the email and its
associated files. Any views or opinions presented in this email and its
attachments are solely those of the originator and do not necessarily
represent those of Egyptian LNG. Thank you for your co-operation.
_______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
DISCLAIMER: Information contained in this e-mail and in any of its attached
files, including replies and forwarded copies, is confidential and intended
solely for the addressee(s) and may be legally privileged or prohibited from
disclosure. If you are not the named addressee, you are on notice of its
status and may not use, copy or disclose this information to any other
person. To do so could be a breach of confidence and unlawful. If you have
received this message in error then please return this message by reply
e-mail to the sender immediately and delete all copies of the email and its
associated files. Any views or opinions presented in this email and its
attachments are solely those of the originator and do not necessarily
represent those of Egyptian LNG. Thank you for your co-operation.
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------


This message and its attachments may contain legally privileged or
confidential information. It is intended solely for the named addressee. If
you are not the addressee indicated in this message (or responsible for
delivery of the message to the addressee), you may not copy or deliver this
message or its attachments to anyone. Rather, you should permanently delete
this message and its attachments and kindly notify the sender by reply
e-mail. Any content of this message and its attachments which does not
relate to the official business of the sending company must be taken not to
have been sent or endorsed by that company or any of its related entities.
No warranty is made that the e-mail or attachment(s) are free from computer
virus or other defect.


This message and its attachments may contain legally privileged or confidential information. It is intended solely for the named addressee. If you are not the addressee indicated in this message (or responsible for delivery of the message to the addressee), you may not copy or deliver this message or its attachments to anyone. Rather, you should permanently delete this message and its attachments and kindly notify the sender by reply e-mail. Any content of this message and its attachments which does not relate to the official business of the sending company must be taken not to have been sent or endorsed by that company or any of its related entities. No warranty is made that the e-mail or attachment(s) are free from computer virus or other defect.

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------

Relevant Pages

  • RE: SORBS
    ... We went for the managed service solution from messagelabs.com which really did a wonderful job in blocking spam using different methods, and in scanning/blocking infected messages that includes scanning against ... feature many different public blocking list services (like SORBS), ... Detect Malicious Web Content and Exploits in Real-Time. ... This email has been scanned by the MessageLabs Email Security System. ...
    (Security-Basics)
  • Re: Exchange Removing Suspious Attachments
    ... blocking does nix the chance that the A/V may not recognize a future ... attachments, ... You don't have to rely on the A/V ... than you do with SBS attachment blocking. ...
    (microsoft.public.windows.server.sbs)
  • Re: Attachment Setting *
    ... I have no problem with the other features (popup blocking, etc.), and image blocking in OE works fine. ... Leen indicates his attachments are blocked, but I'm seeing the same thing Peter reported. ... be a problem in Server 2003 SP1. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: [Full-Disclosure] [Fwd: Last Critical Update]
    ... both for our sanity, our customer's sanity, and the sanity of the 'Net as a ... we're blocking their attachments. ... It's too late to just *stop* all attachments in their tracks. ... You're about to run something unsafe. ...
    (Full-Disclosure)
  • Re: Virus in Attachments option
    ... I am not blocking attachments.The sender has attached two files. ... cannot change the setting to block suspect attachments. ... >>Tools|Options|Security Tab and uncheck the box with the message ... when I try to uncheck the box I cannot do so because it is grayed ...
    (microsoft.public.windowsxp.general)