Is their anyway to run anti-spam against an inbox of already downloaded mail?

I need to clean a legacy inbox and would love to be able to run something to identify known spam messages. All I can find are tools for preventing spam on the way in.

There are very few Mac Viruses, mainly because the Mac code is written more defensively than Windows. Some of the credit goes to the developers of Unix, some to the developers of Mac OS X.
Also, if you have your own Router and use DHCP, the Firewall provided gives good protection from random attacks from the Web.
The current wave of Mac scare-ware is a group of Trojan Horse programs called Mac Defender and similar names. Appearing out of nowhere, It claims your Mac is infected, and asks to run a detailed scan. This used to be an obvious hoax, because the window the old ones drew had Microsoft Windows Icons. Now they are drawing Mac windows on Macs.
Once you have allowed it to begin, it requests your Admin password. If you supply your Admin password, it can do ANYTHING to your Mac. This is similar to a scam where a stranger in a Big Black Car rolls up to you and offers you candy, then to go for a ride.
Strangers who spontaneously offer you "candy" and other free stuff on the internet are not your friends. They will take you and your computer for a ride, and you may never be seen again. Do not allow Safari to [√] open "safe" files automatically. Do not provide your Admin password, to any strangers, ever.
If you maintain your presence of mind long enough to refuse generous offers from strangers to scan your Mac, and refrain from providing your Admin password to strangers, it is very unlikely that your Mac is infected with anything. If you are exceptionally paranoid, you can proactively seek out free anti-virus software such as ClamXAV or Sophos Anti-Virus. These programs are respected, but will have nothing to do, and may slow down your Mac and make installing new software more difficult.
My recommendation it to suggest to your friends that they get a Mac. If you tell them you have never had a virus, they will find that unbelievable, and based on their own experience, will likely call you a liar.

Similar Messages

Is their anyway you can trace a lost IPod?

I lost my iPod touch 4 generation, is their anyway I can located it by GPS I didn't download an apps on it. I have the serial# & phone #?

No ipod has GPS at all.
IF you set up find my ipod on the ipod itself and it is on and it is connected to wi-fi, then you may be able to get an approximate street address. Otherwise, it cannot be tracked.

Do I need to run anti-viral program after trying to open a spam attachment?

I was tricked by a spam email and clicked on a link, which did not open. I've been advised to delete the email (done), change my password (done), and run anti-viral program (not done, and never have). What, if anything, should I do?

You don't need to run antivirus software after that. Just be more careful in the future.
(114282)

Nation members - share your feedback on IronPort Anti-Spam!

IronPort Anti-Spam customers,
On a monthly basis, we like to collect information on customer satisfaction levels with IronPort’s spam defenses. If possible, please click on the below link and fill out the brief, IronPort survey.
Benefits include:
• All respondents are entered into a raffle to receive $100 in cash
• This survey shouldn’t take more than 1 minute to fill out.
• The feedback you provide goes a long way in helping us understand customer needs and concerns.
Please be sure to complete this brief survey by no later than Thursday, June 7th.
Please DO NOT complete this survey if you are running Brightmail Anti-Spam.
Thanks in advance!
Dave Mayer, IronPort Anti-Spam Product Manager
https://www.surveymonkey.com/s.aspx?sm=w7b1FUslBFlsAPcaSLPTlw%3d%3d

Who is Dave Mayer? Is this a real invitation from IronPort?
Hi Pat,
Dave M. is a product manager here at IronPort, and yes, the survey is real.
Thanks!
Garrett (IronPort Technical Publications)

How to configure anti-spam in hub transport

i have run the powershell commands to enable anti-spam on my hub transport. i do not have an edge transport.. are there any specific commands or configs i need to make other than enabling anti-spam? Im getting spam inside my organization from ip's that are
blacklisted on the internet, so that leads me to believe anti-spam is not working..
any assistance appreciated!

The anti-spam features that are enabled on hub transports are very basic.:
http://technet.microsoft.com/en-us/library/bb201691(v=exchg.141).aspx
You should use 3rd party or a cloud provider for "real" anti-spam functionality.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

Anti malware / anti spam / virus protection

Greetings,
With the introduce of Exchange Server 2013 along with its architecture, Microsoft has moved Transport services / roles to Mailbox Server Role. well, when it comes to anti malware / anti spam and viruses , Microsoft recommends deploying them on Mailbox Server
role, while on CAS, not necessarily be deployed as long as messages are not inspected on CAS Servers.
While some articles say the opposite, and mention configuration of Anti malware ,etc.. on CAS Servers.
What is the best practice for deploying anti malware / spam / virus Software on CAS, and what is the best recommended software for messaging and OS level protection, say Symantec for example.
Thanking you
Jamil

Hi,
Based on my knowledge, in Exchange 2013, the CAS server acts as a stateless proxy for all inbound and outbound external SMTP traffic, it does not inspect message content and does not queue any messages locally. Moreover, as you know, in Exchange 2013,
the Transport service, which runs on all Mailbox servers, is almost identical to the Hub Transport server role in previous versions of Exchange.
Thus, anti-spam agents in Exchange 2013 run on Mailbox servers. And here is a reference about enabling Anti-Spam on Mailbox Servers:
http://technet.microsoft.com/en-us/library/bb201691(v=exchg.150).aspx
Thanks,
Angela Shi
TechNet Community Support

Send connector - e-mails from two domains to distinct anti-spam IPs

I have an Exchange enviroment that has two domains. I want that e-mails sent from a domain do the relay to an anti-spam, and e-mails sent from another domain do the relay to another anti-spam.
Example:
I need to config send connector to send the e-mails from "test1.com" to IP 10.160.190.66 and from "test2.com" to IP 10.160.190.69
How do I do?
I need this because each domain uses distincts anti-spam
Tks.

Hi,
Before going on, I would like to confirm the following information.
What's the version of the Exchange?
Whether the two domains have their own Exchange or share one Exchange?
Thanks
Allen

Anti spam filter Mail Issue

No mail arrived to 10.6.6 Mail Server after enabling "zen.spamhaus.org" spam filter. I can send to any, but receive only from local domain. And after disabling the filter, I can receive smoothly from all domain. My server is not blacklisted and it's firewall working correctly.
Postcon output:
mailsrv:~ admin$ postconf -n
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
header_checks = pcre:/etc/postfix/customheaderchecks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mapsrbldomains =
messagesizelimit = 10485760
mydestination = $myhostname, localhost.$mydomain, cmrdi.sci.eg, localhost, $mydomain
mydomain = cmrdi.sci.eg
mydomain_fallback = localhost
myhostname = mailsrv.cmrdi.sci.eg
mynetworks = 127.0.0.0/31,192.168.0.0/16
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpsasl_passwordmaps =
smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated permit
smtpdenforcetls = no
smtpdhelorequired = yes
smtpdhelorestrictions = rejectinvalid_helohostname rejectnon_fqdn_helohostname
smtpdpw_server_securityoptions = login,plain,gssapi,cram-md5
smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination checkpolicyservice unix:private/policy permit
smtpdsasl_authenable = yes
smtpdtlsCAfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .chain.pem
smtpdtls_certfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .cert.pem
smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL
smtpdtls_keyfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .key.pem
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = yes
tlsrandomsource = dev:/dev/urandom
unknownlocal_recipient_rejectcode = 550
virtualaliasdomains = $virtualaliasmaps hash:/etc/postfix/virtual_domains
virtualaliasmaps = hash:/etc/postfix/virtual_users
and the bounce message I receive:
Hi. This is the qmail-send program at mx-relay.netfirms.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
195.43.3.66 does not like recipient.
Remote host said: 554 5.7.1 Service unavailable; Client host [70.35.17.169] blocked using zen.spamhaus.org
Giving up on 195.43.3.66.
Can you find a solution to this.

Hi Dave,
Following are the detailed steps to uninstall Anti-Spam:
Close the EMC (Exchange Management Console).
Open the PowerShell and navigate using the following path: "Program Files\Microsoft\Exchange Server\Scripts".
Run the "uninstall-AntispamAgents.ps1" script as shown in window (with ./ before the script name) below:
Note: You will be prompt to disable and then uninstall each agent of the Anti-spam system like the Connection filtering, content filter, Sender filtering etc.
Restart the "Microsoft Exchange Transport" service in order to apply configuration changes.
Open the Exchange Management Console, and on the Organization configuration list, select
Hub Transport. You will see that the "Anti-Spam" tab has been removed from the Hub Transport properties.
I suggest double check whether you have re-start the Transport service.
More details in the following link:
http://www.petri.com/install-anti-spam-exchange-2007.htm
Thanks

Running a reports against different databases

I have written a report that uses a ref cur in a database package to derive the main query. I've compiled the report and it runs fine.
The problem is when I try to run it against a database other than the one it was compiled against (i.e. compile against DEV DB, test against TEST DB, finally migrate to PROD DB). Each of these databases are identical in terms of their objects but if I run the report against an environment it wasn't compiled against I get the following messages:
REP-1437 Run time error in the PL/SQL development environment (DE).
PDE-PSD001 Could not resolve reference to <Unknown Program Unit> while loading <unknown> <unknown>
I noticed initially that the report and the database package had the same name, I though this may be confusing things so I renamed the stored proc but I still get the same results.
I can get around the problem by either re-compiling it against each database or by getting the form to call the .rdf (rather than the .rep) so it is recompiled as and when required but this doesn't seem right.
Anyone have any ideas?

Hi Steve,
You can try using the RECURSIVE_LOAD parameter. By default, it is set to YES. If you are running with the .rep, set it to NO on your command line. What this means, is that it will not try to recompile the plsql in your report.
Hope that helps,
Toby

Anti-spam / Outbreak scan size

Hi everybody,
I'm looking for advice to determine the maximum message size for Anti-spam and Outbreak scan.
I am currently using a scan size of 1M for Anti-spam and I will add Outbreak filter (more and more spam exceed my spam limit).
My equipment is an ESA C370 with AsyncOS 8.0.1.
I found in the documentation the following lines :
Always scan messages smaller than—The recommended value is 512 Kb or less [...] Cisco advises not to exceed 3 MB for the always scan message size.
Never scan messages larger than—The recommended value is 1024 Kb or less. [...] Cisco advises not to exceed 10 MB for the never scan message size.
For messages larger than the always scan size or smaller than the never scan size, a limited and faster scan is performed.
I didn't find any sentence about recommanded scan size for Outbreak...
Thank you for your help.
Best regards

This is a little older information - but, still would hold true --->
Currently, on the E-mail Security Appliance, the maximum scan size for IPAS is limited to 128K by default (the original default was 256K so many older appliance might have this set as the limit). Messages larger than this limit are not scanned by IPAS. Recently, Cisco IronPort did some extensive performance and efficacy testing on an average message load to determine the impact of increase scanning size on the E-mail Security Appliance.
The tests show that when raising the maximum scan size for IPAS the increase in efficacy is significant: a 256K maximum scan size yields a 24% decrease in missed spam, and a 512K maximum scan size yields a decrease of 35% in missed spam. However, there is a potential performance impact of 24% when going from a maximum scan size of 128K to 512K (depending on the type of hardware platform). The impact of going from a maximum scan size of 128K to 256K is 12%. See summary below:
             128K -> 256K scan size limit:
                     12% possible performance reduction, 24% reduction in missed spam
             128K -> 512K scan size limit:
                     24% possible performance reduction, 35% reduction in missed spam
Below table show the performance results of a medium mailbox with a 50:50 ratio of spam and ham. MPS is messages per second.
128K (Baseline)
MPS
256K/
MPS
% diff with baseline
512K/ MPS
% diff with baseline
768K/ MPS
% diff with baseline
1M/ MPS
% diff with baseline
C100
3.45
3.1
10.14%
2.93
15.07%
2.82
18.26%
2.75
20.29%
C150
5.25
4.72
10.10%
4.4
16.19%
4.4
16.19%
4.27
18.67%
C160
12.5
11.1
11.20%
10.4
16.80%
9.99
20.08%
9.79
21.68%
C300
4.42
4.08
7.69%
3.87
12.44%
3.74
15.38%
3.67
16.97%
C350
11.8
10.5
11.02%
9.94
15.76%
9.55
19.07%
9.39
20.42%
C360
30
27
10.00%
25
16.67%
24
20.00%
24
20.00%
C370
29
26
10.34%
23
20.69%
22
24.14%
22
24.14%
C600
8.8
7.86
10.68%
7.46
15.23%
7.17
18.52%
7.06
19.77%
C650
25
22
12.00%
20
20.00%
19
24.00%
19
24.00%
C660
43
38
11.63%
35
18.60%
33
23.26%
33
23.26%
X1000
11.3
10.1
10.62%
9.61
14.96%
9.27
17.96%
9.12
19.29%
X1050
45
40
11.11%
37
17.78%
35
22.22%
35
22.22%
X1060
51
45
11.76%
41
19.61%
40
21.57%
39
23.53%
X1070
59
52
11.86%
48
18.64%
46
22.03%
45
23.73%
Recommendation and Performance measure:
The Cisco IronPort Security Applications Group recommends that all customers review their current stability and performance (see below for some tips on how to measure this) to determine if they can safely raise the maximum scan size for messages sent to IPAS (IronPort Anti-Spam Engine). It is also recommend that you take a phased approach to the increase. If maximum scan size for IPAS on your E-mail Security Appliance is currently set to 128K (131072), then first raise the maximum scan size to 256K (262144) and re-evaluate your stability and performance. If everything is stable then increase the scan size limit to 512K (524288).
Performance of an E-mail Security Appliance depends on the set of features enabled on the appliance such as anti-spam, anti-virus, message filters and content filters along with the load of the appliance based on the no. of msgs/sec scanned and maximum size of a message allowed.
The most effective way to monitor system capacity is to track overall volume, messages in the work queue and incidents of Resource Conservation Mode. The System Capacity page under Monitor > System Capacity provides a detailed representation of the system load, including messages in the work queue, average time spent in the work queue, incoming and outgoing messages (volume, size, and number), overall CPU usage, CPU usage by function, and memory page swapping information.
The System Capacity - system load report shows the overall CPU usage on your IronPort appliance. AsyncOS is optimized to use idle CPU resources to improve message throughput. High CPU usage may not indicate a system capacity problem. If the high CPU usage is coupled with consistent, high-volume memory page swapping, you may have a capacity problem.
This page also shows a graph that displays the amount of CPU used by different functions, including mail processing, spam and virus engines, reporting, and quarantines. The CPU-by-function graph is a good indicator of which areas of the product use the most resources on your system. If you need to optimize your appliance, this graph can help you determine which functions may need to be tuned or disabled. The memory page swapping graph shows how frequently the system must page to disk.
If stability and performance does drop below acceptable limits, you might try a smaller increase. Any amount greater than the current setting will help efficacy and reduce missed spam. For instance, if 512K proves to be too much of a burden on your E-mail Security Appliance you might try a value of 384K (393216).
Hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

No more anti-spam filter or block list updates?

Our Exchange Server 2007 (Enterprise) was receiving these updates rather frequently until February 2nd. There was a connection error but then nothing. I just looked in the Microsoft update catalog and the server
is has the latest updates (compared against the Exchange console).
What gives? Did support stop? Or, when will the spam and block list updates resume? Our spam has increased dramatically since that date... I've been searching a lot but everything I find only talks about having
that service enabled, which it is.
TIA
Here are the latest versions I have installed:
Microsoft Exchange Server 2007 Enterprise Block List Updates v3.3.14529.029 (2/2/2015)
Microsoft Exchange Server 2007 Enterprise Anti-spam Filter Updates v3.3.14528.472 (1/29/2015)

Thank you for trying to help and offering that reply. I did try that originally. I've disabled and re-enabled both through the command line and through the management console. Everything shows that the updates
are off/on (as I make the change), indicating all the commands are working as they should.
Unfortunately, it seems there just aren't any updates. It doesn't make any sense. When I go to the link below, I don't see anything there beyond February
1st. And, I have all the updates through then (on the block/spam side) and I can receive manually and automatically all the updates for SBS 2008 in general since. It's just this one product feature not working/updating...
Is anybody getting updates for Exchange 2007 Enterprise?
Here's the link that's not showing any updates since February 1st, 2015:
http://catalog.update.microsoft.com/v7/site/Rss.aspx?q=exchange+server+2007+anti-spam&lang=en

Anti-spam and anti-virus suggestions

I would like to ask and get some feedback about the free anti-spam and anti-virus tools which integrate with the Java Messaging System from Sun. I would also like to express my concern with SpamAssassin since I suspect it uses too much system resources. But, anyway, if it blocks the spam with a higher percentage compared to other solution(s), then I would forget about how much resource it requires as long as it is in reasonable amounts.
Please send me your comments,
Thanks!

Hi,
Following on from what Jay said, SpamAssassin can indeed use a lot of resources if badly managed. This includes using large numbers of rulesets especially if they add very little to the overall score, and simpler things such as not using a local DNS cache. SpamAssassin if tuned well and if your system has a reasonable amount of RAM (2GB or more) can work just fine.
For example I ran x86 dual-CPU systems (less powerful then say an x4200) which were able to comfortably Spam (SpamAssassin) and Virus (Sophos Anti-virus) process 100-150K emails/day.
At the end of the day you get what you pay for. I tried out the Sophos Anti-Spam/Virus solution (Puremessage which has its own messaging server channel from memory) and found it to be very competent & slightly more efficient then SpamAssassin. In this case the cost was the limiting factor.
Regards,
Shane.

X-IronPort-Anti-Spam-Result Header

Hello:
Is there any way to decode the header X-IronPort-Anti-Spam-Result. I think it has some information about the rules and the score the message ranked in CASE, but it's not explained it's meaning or how to decode.
It would be useful for me for understanding false positives in spam and which rules where aplied.

I think I would be nice for each message tracked by CASE having information about the reason of the scoring but not so much as tell in debug level.
I haven't taken any interest in the CASE logs so I don't know exactly what's in them, but I can't see IronPort putting the information you want in there, either. That would allow spammers to buy something small like a C10, feed their spam through it, and use the log results to tune their spam.
We ran into exactly the same issue when we first started using IronPort/Brightmail back in 2004. It's frustrating, because honest customers feel like they have a right to know what's going on with their mail. I can't say I disagree with that. But giving an attacker an "oracle" by which he can indirectly view the inner workings of your defenses gives him an extreme advantage in subverting them. Therefore this stuff must be kept secret.

My game center won't load and shows up blank when I try to open it. I've already tried to close all the apps and restart it and it still won't work. Is their anyway to fix it without restoring it??

My game center won't load and shows up blank when I try to open it. I've already closed all of my apps and restarted it and it still won't work. Is their anyway to fix it without restoring it and starting over??

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- sign out and the sign back into Game Center
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: Back up and restore your iOS device with iCloud or iTunes
- Restore to factory settings/new iOS device.

I need to run a map against a particular dataset - how can i do it in OWB

Hello again :)
I need to run a map against table on a particular dataset (WHERE clause) - how can i do it in OWB?
The map is loading data from table A into table B (doing all sorts of wierd and wonderful things in between). Now table A had more (a lot more) data added which i have to load into table B.
How can i modify my map so that it only runs agains this newly added data (normally i would do a where clause).
i cannot find how to do it in OWB :(
The map i am runnig is fairy complex so i didn't really want have to create another table/view of the data i need then remap in all etc.
Any ideas would be greatly appreciated.
thank you very much
Kind Regards
Vix

Hello AP
Well that is the thing - records are constantly added to table A all the time and then undergo tramsformations and loaded into table B. What i want to do is somehow indicate in the the map to only run agains records that have beed added (colmn2 = 'value').
At the moment i created a view for the desired dataset (colm2 = 'value') and remapped everything. But it is a bit of a pain:
1) there are a lot of functions and each takes a number of columns (i have some functions taking up to 6 diff columns)
2) i have data loaded to table A all the time and i need to then transform and load it to table B. so i try to aviod doing the whole re-mapping thing all the time.
In TOAD it would be a simple statment 'where colm2 = 'value' and all my functions will be run agains those records that satisfy the condition. How can i do it in OWB?
If i use filter - i would have to use 'mid' table where filtered records will be loaded and from that use 'mid' table as table A in the map. does this make sense?
the main disadvantage is the performance - moving data from one table to 'mid' table etc.
I tried using conditional load filter and it still doesn't do what i want.
After trying diff options i decided to ask people here about it. The only thing i have left to try is to ask Oracle support. I am sure it would be a 'user knowledge' as i am sure this functionality exist i just can't find any references to it.
Thank you very much for all your help. In fact this forum helped me a lot with a number of other issues :)
i just feel like a lemon coz it is very simple thing and i can't find how to do it...
Kind Regards

Is their anyway to run anti-spam against an inbox of already downloaded mail?

Similar Messages

Maybe you are looking for