|
The MIME/mailsweeper software is pretty ugly. It was once the only player in this market, but it has fallen seriously behind since newer products have come along. They also seem to have reached the point where when they fix something, they break something else that they had previously fixed.
The bulk of confguration consists of writing simple pattern matching rules, which are then weighted using an apparently inconsistent method to determine which queue to put the mail into. Certain things just can't be weighted and must be put top of the rule chain - having the F-bomb a dozen times in one message shouldn't drop it in the profanity queue if there is a known virus detected by the external virus scanner, etc.
The expression parsing laguage is truly awful, broken in places, and by its design woefully limited. Futhermore, the more restrictive a policy you make using simple expressions and applying Bayesian analysis of dubious prior distribution, the more likely you are to stop valid email. This results in the administrator spending long hours checking block queues to release business email.
At a certain businesss that I'm familiar with, a mail gateway is handling less email than a certain ISP that many of us here are familiar with. Despite using a comparatively recent Compaq 580 with buckets of memory, the proxy based mailsweeper regularly builds up a four hour processing backlog, due to the hundreds of regular expressions added to block major spammers, and profane or obscene content. Several staff collectively put in a dozen hours a day checking queues.
If you want to block spam, there's no killer app on the market, and you'll probably do better figuring out how to use spam assassin, mail-abuse.org, and vipul's razor. These open source tools are a good deal more customisable than the chunky bloatware available for a few grand, and since you're commiting to many, many hours of administration, you may as well put in some thought up front...
Just my 0.0162551 Euro.
--
DrGoon
|
