BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 09-02-2007, 07:49 AM   #1 (permalink)
Thumbs Must Hurt
 
Join Date: Feb 2005
Model: 8830
Carrier: Verizon
Posts: 54
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Exchange, Spam and the BES

Please Login to Remove!

First, I am not a network engineer but an trying to do some preliminary data collection for my Network Engineer Consultant. We just rebuilt my company's server to accommodate BES. I am the only BB user and really wanted to get BES up and running. Previously we had conflicts between BES and other applications using SQL resources ( don't ask, I really don't understand). Anyway, now this works like a dream, BES is running now and I give it a big thumbs up except for one problem, spam. Here is our configuration:

Small Business Server 2003 (purchased 12/05) with all updates
The free version of BES
Ninja anti-spam software
Symantec Anti virus

Here is what is happening:

I have spam slipping past the Ninja hitting the blackberry without it hitting my Outlook mail box. This is obviously a timing issue. Do any of you have any suggestions on how I need to resolve this???

Thanks in advance.
Offline  
Old 09-02-2007, 08:34 AM   #2 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Outsource your anti-spam solution using a system such as MessageLabs (messagelabs.com).
You should be filtering spam before it even hits your network.

You might also consider implementing a spam-filtering appliance, or a spam-filtering firewall if you don't have the ability to outsource the whole solution.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 09-02-2007, 09:01 AM   #3 (permalink)
Knows Where the Search Button Is
 
Join Date: Aug 2007
Location: Spring, Texas
Model: 8830
PIN: N/A
Carrier: Sprint-Nextel
Posts: 25
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by penguin3107 View Post
Outsource your anti-spam solution using a system such as MessageLabs (messagelabs.com).
You should be filtering spam before it even hits your network.

You might also consider implementing a spam-filtering appliance, or a spam-filtering firewall if you don't have the ability to outsource the whole solution.
Agreed.

Block the spam before it hits your exchange server with somethign like a Barracuda or a Watchguard, or subscribe to an off site spam filter provider.

Also, make sure that the spam filtering that you are doing is not client side. If you are filtering the spam from withing Outlook, that is how your HH is getting the spam as the BES seems to grab email instantly from exchange compared to the Outlook client.

Just a few things to think about.
Offline  
Old 09-02-2007, 09:40 AM   #4 (permalink)
CrackBerry Addict
 
Join Date: Oct 2004
Model: 9800
OS: 6.0.0.337
Carrier: (`.at&t.)
Posts: 825
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

The best spam appliance, bar none, is from ironport. And I don't say that lightly.
Offline  
Old 09-02-2007, 09:42 AM   #5 (permalink)
x14
BlackBerry Extraordinaire
 
Join Date: Jul 2005
Location: NYC
Model: 9800
OS: 6.0.0.546
Carrier: AT&T
Posts: 2,344
Post Thanks: 0
Thanked 17 Times in 16 Posts
Default

Quote:
Originally Posted by why1504 View Post
Here is what is happening:

I have spam slipping past the Ninja hitting the blackberry without it hitting my Outlook mail box. This is obviously a timing issue. Do any of you have any suggestions on how I need to resolve this???
Just to clarify. BES processes everything that hits your Inbox. For a message to get to your BlackBerry it's gotta be in your Inbox. BES is probably processing the messages before the Ninja process identify the message as a SPAM.

Ideally you want to stop the SPAM before reaching the exchange server.
__________________
Exchange 2007/BES 5.0.2 MR2
Offline  
Old 09-02-2007, 09:44 AM   #6 (permalink)
x14
BlackBerry Extraordinaire
 
Join Date: Jul 2005
Location: NYC
Model: 9800
OS: 6.0.0.546
Carrier: AT&T
Posts: 2,344
Post Thanks: 0
Thanked 17 Times in 16 Posts
Default

Quote:
Originally Posted by Inphektion View Post
The best spam appliance, bar none, is from ironport. And I don't say that lightly.
We use it and its awesome! Drops 99% of our SPAM.
__________________
Exchange 2007/BES 5.0.2 MR2
Offline  
Old 09-02-2007, 09:46 AM   #7 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: i5s
Carrier: AT&T
Posts: 27,796
Post Thanks: 33
Thanked 441 Times in 381 Posts
Default

We use Postini; stops the spam before it even hits your network.

Ironport is also excellent, but Postini does the job for us.
Offline  
Old 09-02-2007, 01:34 PM   #8 (permalink)
Thumbs Must Hurt
 
Join Date: Feb 2005
Model: 8830
Carrier: Verizon
Posts: 54
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks for the suggestions. Currently I only have 10 email accounts but I do have a new WatchGuard Firebox 10X W. Adding the anti spam to this device should be very easy. I noticed the annual license for 15 users is less than $150 this looks to be the best value. The other solutions identified here look to be setup for more users than I have. If any of you have experience with the WatchGuard anti spam add in.
Offline  
Old 09-02-2007, 02:14 PM   #9 (permalink)
Thumbs Must Hurt
 
Join Date: Apr 2006
Model: !
Carrier: !
Posts: 115
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

whoa there cowboy! before you go and buy new stuff...

You may just need to add a time delay to your BES send, here is how:

Cloudmark - Anti Spam and Spam Blocker Solutions

we use Cloudmark, which works awesome! BUT - without the entry linked above, the BES catches emails too fast and sends them along. with the link above (shows you how to add a delay to your BES message send) our anti-spam DOES have enough time to remove it before BES sends it.


Last edited by bigmatty : 09-02-2007 at 02:16 PM.
Offline  
Old 09-03-2007, 06:20 AM   #10 (permalink)
Thumbs Must Hurt
 
Join Date: Feb 2005
Model: 8830
Carrier: Verizon
Posts: 54
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks!!!
Offline  
Old 09-03-2007, 10:36 AM   #11 (permalink)
New Member
 
Join Date: Jul 2007
Model: Many
PIN: N/A
Carrier: Various
Posts: 7
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by Inphektion View Post
The best spam appliance, bar none, is from ironport. And I don't say that lightly.
Had you said IronMail I may have agreed with you. One hugggge difference between the two for enterprise class systems is IronPort can only query one LDAP directory, IronMail can query multiples. This is a ginormous difference.
__________________
BES 4.1.4
Exchange 2003 SP2
27k Mailboxes
1.2k BES/Blackberry Users
14 Domain Active Directory Forest
Offline  
Old 09-04-2007, 07:22 AM   #12 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,632
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

If you're scanning client-side there really isn't much you can do (especially if you're using cached Exchange mode) ....

If you're scanning server side you can check this out - Delay mail processing for an anti-virus scan (works for spam filtering too; same premise)
Offline  
Old 09-04-2007, 01:37 PM   #13 (permalink)
CrackBerry Addict
 
ladydi's Avatar
 
Join Date: Jun 2005
Location: Washington
Model: 8800
Carrier: T-mobile
Posts: 848
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by why1504 View Post
Thanks for the suggestions. Currently I only have 10 email accounts but I do have a new WatchGuard Firebox 10X W. Adding the anti spam to this device should be very easy. I noticed the annual license for 15 users is less than $150 this looks to be the best value. The other solutions identified here look to be setup for more users than I have. If any of you have experience with the WatchGuard anti spam add in.
This will be your best bet. Its cost effective and better for your network/mail server to get the spam before it gets in. Personally, I wouldn't want to set up a mail delay on my BES.
__________________
~Di~
Windows 2003
Exchange 2003
BES 4.1
Offline  
Old 09-04-2007, 05:28 PM   #14 (permalink)
CrackBerry Addict
 
amukhey's Avatar
 
Join Date: Sep 2004
Location: Los Angeles
Model: 9700
Carrier: T-Mobile
Posts: 750
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I have done an extensive review from all the leading provider's out in the market / market learder's. My opinion is to go with Postini. Once you have used their system and manage through their webadmin, spam is so easy to maintain and manage. They provide a solution and not just a service...
Offline  
Old 09-05-2007, 05:12 AM   #15 (permalink)
Thumbs Must Hurt
 
Join Date: Feb 2005
Model: 8830
Carrier: Verizon
Posts: 54
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by amukhey View Post
I have done an extensive review from all the leading provider's out in the market / market learder's. My opinion is to go with Postini. Once you have used their system and manage through their webadmin, spam is so easy to maintain and manage. They provide a solution and not just a service...
This did not appear to be a cost effective solution with only 7 employees.
Offline  
Old 09-05-2007, 06:24 AM   #16 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,632
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Try something like ExchangeDefender SMTP Security or Symantec Hosted Mail Security ...

Or, use IMF and a local A/V scanner and simply delay mail delivery for 10 seconds to make sure all the scanners can do their magic.

WinDeveloper IMF Tune will help you tweak IMF easier.

Last edited by hdawg : 09-05-2007 at 06:31 AM. Reason: more content
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.