Minimising Junk/UBE mail

FTGate has a powerful set of features that can be used to eliminate most of the UBE Unsoliceted Bulk Email - commonly known as SPAM mail before it reaches the users mailbox. The most effective way to eliminate UBE is to not let it onto your system. If it does reach your system then you need to use the Filtering facilities to filter out the UBE.

 

Stopping the UBE before it gets into the system

The best solution to filtering UBE is to reject it before it is received by your server. This is best achieved by filtering the messages as they are sent to FTGate.

 

Recommendations:

 

  1. Have your ISP send your mail to you using an SMTP Simple Mail Transfer Protocol (A message send protocol) feed. It is much harder to filter spam once your ISP has accepted it for you. If possible bypass your ISP and have your mail delivered directly to your PC.
     

  2. Turn on PTR A term used for the reverse pointer record in a DNS system. This allows a server to determine the name of a computer from its IP address. record checking
    This will verify that the PC sending you mail has published its details on the Internet. Most legitimate machines do this, most UBE sources do not.
     

  3. Turn on HELO checking
    Only mail clients should use a dotted IP address as their HELO, mail server should use their domain name.
     

  4. Turn on SPF Sender Policy Framework: A system utilising DNS servers to validate that a given IP address is authorised to send mail for a specific domain
    This will require that the server sending you mail is authorised to handle mail for the specified domain. UBE rarely comes from the domain it pretends to use, and thus it will usually fail an SPF check. (See SPF)
     

  5. Turn on RBL Real time Blackhole Lists: a list of mail server that are considered sources of SPAM by the list owner
    This will stop all servers that are known to be sources of UBE (See RBL)
     

  6. Turn on GL
    This will prevent practically all Spam and Virus messages from being accepted and the cost of a small delay in mail delivery to your system for unknown senders. See Greylisting

 

Using Filtering

Once the mail reaches your system, the only way to block UBE is to filter it. FTGate includes a powerful set of filters that can eliminate practically all of the UBE received. To obtain the best filtering the following should be considered:

 

Filter Policy/UbeBlock

In addition the main UbeBlock filter will obtain a rating which will be modified by the above values. All of these settings result in an overall UBE rating which can then be used with the Filter rules to filter messages.

 

It is recommended that all filtered mail be directed to a mailbox which can be examined by an administrator, this will allow the administrator to verify that the filtering is operating as expected and that any false positive messages can be retrieved and delivered to the correct user.