« IBM Hotfix 851HF419 Released | Main| Interesting Spam Variety »

New service "SpamSentinel Reputation" available for beta testing

Tags:
5

We are testing on all of our internal SMTP servers a new service called SpamSentinel Reputation. It is designed to stop about 60% of traffic at HELO, reducing bandwidth and server CPU utilization significantly. It is mostly designed to immediately stop "zombie" computers, which send 100% spam. This means there will be no false positives from this service.

Those messages that are not from 100% spam sources get processed via SpamSentinel, examining content as well as worldwide email patterns.

As this is designed to improve SpamSentinel, there is no additional cost for this software for existing customers. Our first rollout is to customers who process more than 50,000 messages per server per day. This service acts effectively like an "appliance" but without the extra hardware or the false positives.


Here is a sample from our main inbound SMTP server (our SMTP 10 record):

SS Reputation blocks 60% of messages at HELO, The remaining messages, about 44K are processed by SpamSentinel on the server, filtering off 99.2% of the 60% that remain. The overall block rate is 99.63% (397/107,661)

Most of these messages are from zombie servers. The net result is 60% reduction in bandwidth and saving server CPU.

A picture named M2

Overall block rate is 99.63%

Comments

Gravatar Image2 - @ Hans - I think the problem with RDNS is that you do not *have* to set a hostname for your mail server if it only processes outbound mail. The SSReputation is more akin to DNS RBL, although we work closely with the 'list keeper' in this case so we can trust, and to some point influence, the results.


Gravatar Image1 - What is the significant difference from reverse DNS lookups?

Post A Comment

:-D:-o:-p:-x:-(:-):-\:angry::cool::cry::emb::grin::huh::laugh::lips::rolleyes:;-)

Lotusphere

LinkedIn

View Frank Paolino's profile on LinkedIn

Tags

Frank Paolino