Exchange Server spam filter with SLS/RBL
SURBL and Greylisting
|
Xwall is compatible
with all Microsoft Exchange Servers including 5, 5.5,
2000, 2003, 2007 and most SMTP mail servers. It is available
in 32bit or 64bit version and runs on Windows servers
and workstations including server 2008.
A Personal note: Remember the
days when SPAM was still part of someone's lunch? Now
SPAM seems to eat your lunch. Let me introduce to you
Xwall our answer to your SPAM and junk mail problems.
Xwall supports all Microsoft Exchange and most other
SMTP mail servers. Xwall is based on the simple fact
that you need flexibility to fight SPAM. Featuring many
different blocking options including the use of RBL
lists and a learning filters, Xwall has a real impact
on the SPAM flood. As a self contained program, it operates
in front of the Exchange server. Xwall does not modify
your Exchange server and is version independent. A licensing
based on servers rather than users made Xwall one of
the most affordable SPAM solution for many years. Try
it free for 30 days.
| |

|
| |
Ceratec
Inc.
|
August 4th 2008 BACKSCATTER a.k.a. fake NDR spam
In the current XWall version 4.34 offers a highly effective
fake NDR filter. It's named Backscatter fitler. It blocks
the fake NDRs while passing the real ones to the users.
Jun 07 2008 Fighting current spam issues
The NDR pest is not getting any better. Some individuals
may get several thousand spam/fake NDRs a day. The XWall
Beta 3.42h will bring relieve to these folks. I features
a new FAKE NDR mechanism. In addition you also can block
NDRs to individual recipients. Give it a try it will
make a difference. You can download it from our support
site http://support.ceratec.net or from Dataenter.
ECARD VARIANT welcome letter.
The first variant of the Ecard Zombie showed up in
my Inbox today. It thanks you for signing up and includes
a link to a website .... bad news of course. But there
is good news. Your current Xwall (3.29+) can block the
ip address. Add a string http://#.#.#.# in admin->
option-> blocking-> html
|
GOOD
NEWS!

THE
PIZZA IS ON US
XWall
is sold frequently by users recommending it to others.
We figure it's about time we say thank YOU.
For July and August
we will spend less on Google and more one you. Anybody
that buys XWall from us, or can take credit for a XWall
sale at our site can fill out a Pizza claim form
for a Pizza Hut gift card.

Click
the card to fill out the form to claim you dinner..
Only one gift
card is available per sale. Currently this offer is
only available in the US where the Pizza Hut gift cards
can be redeemed.
|
|
|
 |
|
|
 |
New XWall ISP
perfect for large multi server installation -call for Details
(512) 285-2620
|
PLATFORM
|
|
| Operates
on Windows servers and work stations |
| Requires
NT4, 2000, 2003, XPPro , XP, 98, |
| Run
as program or service under NT, 2000,XP
Pro, 2003 |
| Designed
for Exchange - compatible with most SMTP Servers |
| MS
Exchange Server - version independent |
Free
30 day evaluation |
| A
Windows multi-threaded 32-bit application |
|
|
SERVICES
|
 |
| Realtime
Black Lists enabled (RBL) |
| Utilizes
RBLs Spamcop, ORDB, Spamhaus reconfigured |
| Greylisting
filter |
| CCS
Central Checksum service |
|
SURBL service |
| Heuristic
(a.k.a. spamassasin) type filter |
| Economical
command line virus interface ( F-Prot, Sophos,McAfee,
etc.) |
| Daily
Detailed Audit Logs with automatic recycle option |
| Builds
statistic in CVS format, read with Excel, Quattro, etc.
|
| Email
Archiving - archive all incoming and outgoing messages |
| Adds
your disclaimer to all outgoing messages |
| Flexible
routing or disposal of identified SPAM |
| Exclude
and over write option (white listing) |
| Preloaded
with RBL, word, subject and dangerous attachment list |
| Automatically
configures initial settings |
| Real
time recipient verification for Exchange 2000/2003 |
| Compresses
messages when sending to reduce bandwidth |
SPAM
BLOCKING
|
|
| Block
Spamers listed on RBL services |
| Block
domains, IP addresses, email addresses,
host names, mail servers |
| Filter
out HTML and block strings |
| Block
phrases with wildcard characters or spaces |
| Block
all undesired newsletters |
| Stop
nonproductive material like movie clips wasting your bandwidth |
| Block
attachments with predefined extensions |
| Block
external html pages |
| Block
double extensions |
| White
listing - allow messages to and/or from specified addresses
to pass |
| Automatically
builds whitelist from addresses users send mail to |
| Bayesian
filter - Xwall learns from your blocked SPAM examples. |
| Validate
senders Domain, reverse address lookup of senders address |
| 3rd
generation product, proven technology, stable operation |
|
Online
manual reflecting fastest updates and new ways to fight
SPAM
|
Xwall in detail
EASY INSTALL
You have two options operating Xwall on your
network: install it on the same machine as Exchange server
or on a separate machine. If you install Xwall on a separate
system there is no need to modify your existing Exchange or
SMTP mail server in any way. However, most customers install
Xwall on the same system together with the Microsoft Exchange
server. Install Xwall and take
it for a spin - it's quick and easy. Extract
the program, run the setup and answer a few
questions. If your situation is not the norm our tech support
will be available and many questions are answered in our FAQ's.
MAIL FILTERS
Xwall features a whole arsenal of filters and
supports several Relay Black List (RBL) services like
Osirusoft, ORDB, Spamhaus and Spamcop right out of the box.
Xwall has an address filter and compares each address with
your list. It can filter domains, partial and full addresses.
Xwall includes a word, phrase and string filter. Attacking
the never ending messages of viagra, v^i^a^g^r^a, v i a g
r a or v_i_a_g_r_a. You can block IP addresses and attachments
can be filtered by their extensions. Xwall comes with preloaded
RBL relays, text strings, subject words and dangerous attachment
list. You can use them to get Xwall up and running in a hurry.
Xwall takes extensive measures to avoid false positives. If
you're worried a RBL relay is to aggressive you can set the
trigger to only filter the message if 2 RBL services have
the host listed. The exclude table allows you to override
any of Xwall filters including the RBL services. The automatic
whitelist makes it easy for your customer to stay in touch
with you. If enabled all email addresses you send mail to
automatically get added to a whtelist. This list excludes
the emails from your contacts to be filtered out.
Bayes SMART FILTER
Xwalls Bayesian filter is a major step forward
in the fight against SPAM, it learns from experience. It reads
all messages defined as SPAM and builds its database. In addition,
you can tell it what is SPAM by feeding it with SPAM messages
sending them to the Bayes filter. A
correctly setup Bayes filter is a highly effective tool against
SPAM. You control the probability to avoid any false positives.
To fully understand this filter we recommend reading Paul
Graham's White Paper.
Virus Scan
Xwall does not include a virus scan but has
the necessary interface to support Sophos, F-Prot, McAfee
and others at command line level. Messages can be marked,
encapsulated, discarded and so on. For a scanner not supporting
a command line operation anymore (Norton, Trend, ect) the
Xwall manual shows workarounds. All the filtering is accomplished
before the mail ever sees the Exchange server, taking a considerable
load off your Exchange server.
Automatic Whitelisting
Automatic whitelisting is a new feature available
in Xwall version 3.27. This feature automatically adds the
email addess of every outgoing message to the exclude list.
The reasoning behind this ides is that if you send email to
someone it's likely that you want them to be able to reply.It's
a very welcome feature if you implement more aggressive RBLs
like Osirusoft or even Wirehub.
CENTRAL CHECKSUM SERVICE
The new CCS filter in XWall is just the tool
you have been waiting for. We've seen many viruses literally
outrun the virus scanner. At best, one of the Norton's &
Co. would claim to be the fastest to stop the virus, but that
was after the virus did billions in damage. The XWall Central
Checksum Service is very different and much faster.
GREYLISTING
spot bt itself an estimated 80% of your spam.
The filter rejects every message from unknows sources at first
contact and allows passage at the second try. The filte is
based on the fact, mail servers resend messages -spammers
don't.
JUNK MAIL
Yes, there is a difference. While SPAM typically
is distributed by former telemarketers the junk mail includes
some categories not found on any RBL list. Remember Ron and
Nancy, your former coworkers. Well, they moved on but neglected
to unsubscribe to all their newsletters. You probably will
kill them if you ever see them again. Meanwhile, you get your
daily dose of the 57 Edsel club and Martha's specials. Xwall
has options to stop these junk newsletters. You can block
via the TO, FROM or SUBJECT filter.
SPAM ROUTING
If Xwall finds a virus, SPAM or junk mail content
it can stop and delete the message or forward it to a selected
person, usually the postmaster. Xwall also can send a message
to the sender informing him about the blocked message due
to a virus, SPAM or junk mail status. Xwall offers a variety
of options how to handle undesirable mail.
SMTP RELAY
Worried about ending up on an Open Relay list
yourself, Xwall does offer SMTP relay to your in-house and
external users. The SMTP relay in Xwall can be protected
in many ways. Starting with disabling the relay
all together if you don't need to relay. If you do have outside
users you can authenticate the users through NTML (NT/ Win2000
domain users). Also, you may set a general user name and password
and you can restrict access to certain IP address ranges.
Exchange 5.5, 2000, 2003 ready
Xwall sits in front of Exchange and does not
apply any "hooks" into Exchange. You don't have
to worry about your investment in a Exchange 2003 enviroment.
Xwall operates on an all current Windows platforms including
Windows XP and all Microsoft Windows Server 2003 products.
It's efficient 32-bit code with a multi-thread approach can
process mountains of email on a daily basis. Systems with
a 1.4 GHz or higher Athon or Pentium may handle over 100,000
emails a day. Xwall can be installed as a service.
STATS, LOGS, ARCHIVE & DISCLAIMER
Xwallincludes tools not directly related to
SPAM.The additional features were requested and arevalued
by many current clients. Xwall
offers extensive and detailed logs and statistics. Originally
designed for easy trouble shooting,the logs can be used to
extract a wealth of information.Xwall can archive all your
email, a feature requested by many large companies today.
Xwall makes the lawyers in your company happy. It can attach
a disclaimer to all outgoing messages.
Email Spam Analysis Tool Project
This project by Sidebit/Ceratec can process
Xwalls statistical files online giving you an instant view
of your companies email & spam situation. Read more about
it here.
TECH SUPPORT
Ceratec tech support offers phone, email
and fax support for our US and Canadian customers. This includes
pre-sales support. In the US or Canada email support@ceratec.net
or call us at 512 285 2620. Additional tech support via email
is available directly from DataEnter.
The Xwall forum
is open to all Xwall users. Ceratec offers after hours support
if your situation does not allow you to do the installation
and testing during normal business hours.
TRY XWALL RISK FREE
We invite you to try the Xwall Junk mail and
SPAM filter free of charge for up to 30 days. The full version
is available as a download.
If you decide to buy please follow
our online links to purchase Xwall with your credit card or
through PayPal. You may fax us your purchase order at 714-242-1688.
We will supply you with the registration key to fully license
your Xwall installation. Xwall is licensed per server. If
you have one exchange server you need one Xwall and so on.
There is no limit in regard of the number of mail accounts
or users in your company. Compare Xwall to any competitor,
our features and prices are unmatched.
Xwall works for you in many ways
|
MOUNTAIN
VIEW, Calif., Jan 15, 2003 (BUSINESS WIRE) -- LEGATO
Systems, Inc. (LGTO) , a worldwide leader in enterprise
data management software, today announced the results
of an Australian email practices survey conducted by
Image & Data Manager magazine, which showed that
Australian companies may be seriously breaching Archives
and Corporations law by deleting business related emails.
While 77 percent of the companies surveyed indicated
that they use or accept email for financial transactions
such as orders, confirmations and pricing, 80 percent
reported that they delete their emails within a month,
with 42 percent deleting daily. Fifty percent say they
print out less than five percent of their emails, so
often no record is kept.
|
From:
Someone's best Friend: I have just received a message
from one of my contacts that my address book may have
been infected by a virus (called jdbgmgr.exe) not detected
by Norton or McAfee antivirus systems. The virus has
a little bear icon with the name jdbgmgr.exe DO NOT
OPEN IT.
This
is a hoax which causes the users to create the damage.
|
I
am INOR - TROJ_INOR.A This memory-resident Trojan
downloads and executes a backdoor malware from a certain
Web site. This backdoor, detected by Trend Micro antivirus
as BKDR_JEEM.A, configures the system to act as an e-mail
server that can be used by a remote user to send e-mail.
This Trojan spreads as an attached file in forged
e-mail messages, and is believed to come from
a malicious sender. However, this e-mail is spoofed
and its properties may be modified anytime by its sender.
|
Information
about the Friend-Greeting worm:
Friend-Greeting
is a mass mailing email worm, associated with a greeting
application. This worm spreads under Windows systems.
The worm mails invitation email to all addresses found
in Microsoft Outlook contact list.has sent you an E-Card
-- a virtual postcard from FriendGreetings.com. You can
pickup your E-Card
-
The
worm arrives with the following subject;
-
<Recipient>
you have an E-Card from <Sender>
|
|
Enable
Xwall to ARCHIVE ALL INCOMING AND OUTGOING EMAIL
|
Xwall
stops the Teddy bear. Just add jdbmgr.exe to the word
list.
|
Xwall
stops forged addresses & dangerous attachments
|
Xwall
stops the E-card virus. Add Friendgreetings.com to the
word list.
|
|
Using
just a virus scan or a RBL service?
You
may be vulnerable to all these attacks!
|
Xwall features excellent logging
|
> 02-11-04 17:52:41 XWall from accessing the files.
> 02-11-04 17:52:41
> 02-11-04 17:52:41
> 02-11-04 17:52:41 SLS relays.osirusoft.com is responding
> 02-11-04 17:52:41 SLS orbs.dorkslayers.com is responding
> 02-11-04 17:52:41 SLS relays.ordb.org is responding
> 02-11-04 17:52:41 SLS bl.spamcop.net is responding
> 02-11-04 17:52:41
> 02-11-04 17:52:41 Logging to screen is disabled
because XWall runs as a
> service
> 02-11-04 17:52:41
> 02-11-04 17:52:41 0002: SMTP outbound connection
manager started
> 02-11-04 17:52:41 0003: Exchange outbound connection
manager started
|

From the DataEnter site
Works with:
- Every
version of Exchange server including Small Business Server
4.x and Exchange 2000
- Dial-up,
dial-up routers, ADSL and leased-line connections to the
Internet MIME and UUENCODE messages, even with various Western
and Eastern European languages
Benefits:
- Blocks
SPAM messages by checking incoming messages against MAPS
or any other RBL / SLS / SPAM database
- Filters
SPAM messages by scanning the subject, the text part and/or
the HTML part of the message
- Validates
the senders domain and does not accept message from invalid
domains
- Scans
inbound and outbound messages for viruses, even when the
filename includes characters from foreign languages
- Blocks
attachments so that your users do not fill the Exchange
server with unnecessary or dangerous files
- Blocks
attachments embedded in TNEF messages ( WINMAIL.DAT )
- Removes
HTML and/or TNEF formatting from a message
- Detects
looping messages before they harm your server Runs as a
service on NT, Win2000 or XP Pro
- Compresses
messages when sending to reduce bandwidth (25% for zip files,
50% on average, 80% for WinWord and Excel)
- Interfaces
with MRTG to generate real-time statistics Encrypts messages
using SSL / TLS when sending
- Re-assembles
messages to prevent from "hidden" attachments
- Adds
a disclaimer to every outgoing message
Features:
- Schedule
ETRN, even when not using a dial-up connection
- Keeps
a copy of every incoming and outgoing messages so that you
can track each message
- Writes
a statistics file to give you an overview of your traffic
- Forwards
messages to one or more alternate e-mail addresses
- Forwards
a whole domain to a single e-mail address
- Forwards
a whole domain to another domain
- Utilizes
static routes for specific mail servers (acts as a relay
in a firewall DMZ)
Read more about Xwall on our
Emailprofessor sitel
Questions? E-mail
info@ceratec.net or call (512) 285-2620
About Us | Home
| SPAM News | Services
| Products | Support
& FAQ | Contact Info
|