|
There is probably no single form of internet traffic that annoys more internet users than spam. The growth of spam and associated attacks, such as viruses and phishing sites, has completely changed the way that users and administrators view email. For the user, the target of UCE, matters have steadily improved. Modern email clients all come equipped with powerful Bayesian filters that learn from the user's actions and are increasingly effective at identifying spurious emails. Anti-virus and anti-malware software keeps a constant watch for dangerous executables, and education about phishing methods seems to be finally getting through to most users. For the administrator, however, the picture is not so rosy. While a user can afford to spend the few minutes it usually takes to identify spam emails, the admin cannot realistically dedicate his time and energy to the same task. Filtering is done by largely automated rulesets in increasingly complex configurations. This is no longer enough. In fact, for most sites, content filtering alone is an invitation to disaster. Any server that has to scan every incoming email for content can be quickly overwhelmed by a bot storm, even a small one. The answer is to preemptively blocking suspicious incoming mail using the smtp server's anti-UCE configurations, then scanning the remaining (hopefully few) emails for content. Of course, this then adds yet another layer of complexity to the successful configuration. This is what this project is all about. Fighting spam can easily become a full-time job, and the learning curve is both steep and unforgiving of mistakes. The goal of this project is to provide a mail server that will allow both the experienced admin and the relative novice to quickly and easily set up an anti-spam profile, using a simple web interface and a virtual machine distribution to minimize installation and configuration issues. The initial release is simply a virtual machine with all the necessary software installed and a relatively strict set of anti-spam rules already in place. You can get a copy of the current version here. Note that you should have either VMware player or VMware server installed to run the virtual machine. |