When you use only the SmarterMail weights, and my anti-spam settings, then you will not have anything overriding those settings and will, generally, trap 98% of all the spam messages sent your way.
When you introduce external spam filtering, you must be VERY careful NOT to override the SmarterMail spam filter trigger settings, or you will introduce all kinds of issues and problems - and start receiving spam you never dreamed existed.
This is why, when SmarterMail 7,0 was introduced, I decided to see what could be done with their internal settings only.
Now, with the release of Version 15.X (latest version), their antispam and security has gotten significantly better as a single spam filter.
Remember, however, that you MUST be in FULL COMPLIENCE with GOOGLE, YAHOO, COMCAST, and about 14 other large providers or they will deliberately slow down your capability to send to their servers.
- GOOGLE now requires you to VALIDATE YOUR WEBSITE, via a special key, which must be inserted into BOTH your SmarterMail root directory AND your website directory. Otherwise, you are limited to sending them between 25 and 50 messages PER DAY. You must have a company GMAIL account to do this:
-
- They were updated, once again, in June, 2916. Here is the link to the master GOOGLE WEBMASTER PAGE:
- Here is the link to the link to adding your SmarterMail and other website information:
Remember, you must also setup SPF, DMARC, and rDNS, pointing to your PRIMARY SMARTERMAIL IP ADDRESS and name, as it is registered with your SmarterTools licensing - they WILL check this, and be fully compliant with the.EU and CANADIAN versions of DOUBLE OPT IN and AUTO-OPT OUT for MAILING LISTS.
- Remember, many mail servers which handle e-mail for US based companies are located in Europe and/or Canada. Almost all messages sent through a Blackberry now route through Canadian servers in southwest Canada.
- Once you route through any of those servers, you, as the MX server operator, become responsible for following THIER RULES, IN ADDITION to all of the US rules.
- The stronger rule supersedes all other rules, and believe me, the Canadian and UK rules are MUCH more demanding than the US rules.
- As far as YAHOO is concerned, they want some additional verification:
- For YAHOO, you MUST have both an PRIVACY POLICY and ACCEPTABLE USE POLICY, posted, and linked via your menu system. If the page is for a not-for-profit, they also want to see the MISSION STATEMENT. A real human will review and approve, or disapprove, your YAHOO request..
Here are examples of ChicagoNetTech's PRIVACY and ACCEPTABLE USE POLICIES:
Once again, remember, you must also comply with all of the other items:
For COMCAST, you must NOT allow clients to connect on port 25, The only traffic that COMCAST allows on port 25 is MX to MX server traffic. All traffic between CLIENTS and MX servers MUST be handled by PORT 587, the alternate SMTP port which, while it used to be optional, is now MANDATED by the International Engineering Task Force (IETF).
If a client attempts to send directly to port 25, COMCAST will block the connection, via their network, and not notify either the sender or intended receiver. This has helped them cut spam down by a huge percentage in their systems, giving them data time to send more legitimate messages.
Comcast also prefers that all connections are TLS ENCRYPTED to further protect the data and network, but are not, as of yet, blocking based on this.
Please, don't shoot me, or attack me, I am only the messenger here!
I am awaiting a BETA copy of SmarterMail 16.X so I can re-validate all of the antispam settings, revise the document to include the information for SmarterMail 14.X, 15,X and 16.X - eventually dropping all versions except the current and immediate previous version because there is absolutely no reason not to stay current, take advantage of the new features and benefits, and, especially, to take advantage of the new security developments: eg:
- being able to enforce a secondary login, sent via TXT messages, as is done by FaceBook, my bank, and many other financial sites.
- enforcement of TLS SECURE PASSWORD connections - already capable, since SmarterMail 13,X. Works well, and we only had one beef, from a 90 year old customer who needed hands-on assistance to change his mobile devices and desktop to comply.
- IDS blocks:
- IMAP
- SMTP
- POP3
- LDAP
- WEBMAIL
- These are already available, and when properly configured, along with the other SmarterMail BUILT-IN anti-spam tools do a pretty damned good job of protecting both your SmarterMail MX server and controlling the spam received.
AGAIN, and I CANNOT REPEAT THIS TOO MANY TIMES:
For the built-in SmarterMail antispam to work properly, you MUST enable all of the tools, according to my antispam document, which is in the process of being updated, I will amend this post with the correct link, and name, when it is ready.
FINALLY:
I am available to help you configure and monitor your server. Even though I am a "SmarterTools Product Specialist" I get nothing for the posts and assistance via the SmarterMail portal.
If you require assistance, please send an e-mail to me, via ":support@chicagonettech.com" and I will, at no cost, review with you your issues, providing it goes no longer than ONE HOUR.
Everything after that is BILLABLE TIME, and will be billed via PayPal or SQUARE, depending on a variety of factors. PayPal is much more efficient at handling international monetary changes on-the-fly, and my preferred payment choice for non-US customers.
I WILL NOT work with someone who wants me to fix their problem and then "second guesses" the work I have been contracted to do. This has happened four times in the last month, and they are no longer my clients. If you want me to help you, ask questions, but stay out of the way. I will document what has to be done, what I am doing as it is done, and the final changes to your server(s). I will also maintain a complete BACKUP copy of the original server configuration, in case you want to go back to receiving spam or having the original issues.
Good luck!
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net
Phonr: (773) 491-9019
Phone: (224) 444-0169
E-Mail and DNS Security Specialist
Network Security Specialist
Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/
Web and E-Mail Hosting, E-Mail Security and Consulting