Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

FEATURE FEEDBACK: Spam Digest and Spam Quarantining

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> FEATURE FEEDBACK: Spam Digest and Spam Quarantining Page: [1]
Login
Message << Older Topic   Newer Topic >>
FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 11.Sep.2009 9:56:17 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline
Hi everyone,
 
One of the most requested features for GFI MailEssentials is quarantining of spam emails. We are currently planning the implementation of this functionality and we thought of running some ideas through this forum with the aim of initiating further discussions. The following ideas illustrate our current plan for the proposed functionality.
 
·         Quarantining can be enabled for each Anti-Spam feature in MailEssentials individually.
·         Quarantined emails will be stored in a database, and will be purged after sometime (less than one month)
·         An email similar or part of the Spam Digest functionality will be sent to the users, which includes links to their individual quarantined spam. Users can click on these links and they will be shown the quarantined message. The spam digest email will provide the functionality of releasing quarantined emails.
·         The administrator will have access to an admin interface which allows access to and filtering / searching of the quarantined emails. Quarantined Spam can also be released from this interface.
 
Below are some discussion points that we would like to have with you:
 
·         Do you send Spam Digest emails to the users?
·         Would you prefer if the quarantine digest is sent as part of the spam digest email or as a separate email detailing just the Quarantined spam?
·         Would you need to keep spam emails stored for more than 1 month?
 
Any other comments that you may have are welcome.
 
As usual, such posts carry a disclaimer - I would like to point out at this stage that, by discussing this, we do not want to raise expectations unnecessarily and we cannot give any guarantees that we will actually implement this functionality. You will understand that any suggestions and requests for new functionalities that we receive will have to be discussed and approved internally before we can actually commit ourselves to implement them.

< Message edited by neilc -- 15.Sep.2009 4:11:07 AM >


_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software
Post #: 1
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 11.Sep.2009 10:49:31 AM   
RSP

 

Posts: 1270
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
Firstly I'd like to express my pleasant surprise at finally receiving a response to a feature request before seeing it in a beta! Please let it continue with other feature requests being discussed! A suggestion could be to have a sub-forum of feature requests that GFI posts a specific feature with a poll attached to it for ease of interpretation - the current single feature request thread is cumbersome.

To address your discussion points first:

Yes, I send spam digest emails to users at some sites. Not all clients are interested in receiving these emails. But, on a couple of occasions a user has requested retrieval of one of the blocked emails, but unfortunately, these were deleted. This did enable the recipient to contact the sender (after their server was off a DNS blacklist in this case) and have the email resent though.

I believe that a quarantine-only email would be preferable to a combined email given its significance and the suggested user interaction, but this is personal preference. However, if the combined email gave an indication of deleted/quarantined status, this may be better.

I would also suggest that the time limit of the quarantine expiry be configurable. It is not unknown for users to be on leave for a whole month, therefore a 1-month timeout would be inadequate in some cases.

Further possible discussion points:

I'd be interested to know how you'd propose quarantine-releasing for remote users or someone that is just out of the office for a period. If, as I understand your initial suggestion, a hyperlink is provided, then that must also be visible from the outside world. This may not be desirable to some or even practical.

In most of the sites I administer, a quarantine function is not required. In most cases, modules that very rarely produce false positives are configured to delete emails; these modules probably have a false positive once every 3-6 months, usually due to an unforseen (remote system) failure, and so are sufficiently safe to delete emails. Therefore I'd suggest the quarantine feature must not impact system performance when not used.

With regard to the quarantine email, it would be useful for it to list not only the current day's quarantine for a user, but also historical quarantine that is still available in the database. I understand that this may generate huge emails in some situation, so it may be beneficial to configure the displayed history.

As an alternative to the quarantine email, a browser-based quarantine listing could be employed. Remote workers must still be able to release quarantine.

The quarantine feature is likely to be a very large undertaking on GFI's part and although hardware performance and sizing is continually increasing, please don't alienate systems with lower-spec hardware.

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to Nicks)
Post #: 2
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 15.Sep.2009 3:00:00 PM   
tinybeetle

 

Posts: 59
Joined: 2.Aug.2006
Status: offline
We currently use MailSecurity to block certain file-types from entering into our network. However, there are times when an exception must be made. Additionally, we don't permit multimedia files. The biggest cuplrit we encounter are PPT files and PPS files. If we left it up to the users to pick and choose which files should bypass the quarantine, they would release everything.

The best of both worlds would be to have the administrator be able to release or deny, and also to have a database of users that are permitted to release their own. If they are not in the list then they don't get the option.

(in reply to Nicks)
Post #: 3
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 16.Sep.2009 10:09:20 PM   
ict

 

Posts: 25
Joined: 18.Jan.2009
Status: offline
I am in a school environment, so far me I would want total control over what is released to inboxes, users both staff and students would not know how to recognise legitimate email from spam/rubbish. We are pretty strict on Hoax/Chain and joke mail, they would end up releasing and forwarding a lot of rubbish.

In ME we use only two Actions. Delete or Forward.
Delete for DNS BL, DH etc
Forward for Bayesian,Razer etc to security@mydomain.edu.au

My biggest issue is that legitimate mail forwarded, has to be forwarded again and the user gets 'touched' email i.e it looks like it has been read. Ideally if we could have something like mailsecurity, with approve, delete etc,,,

Cheers

(in reply to tinybeetle)
Post #: 4
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 25.Sep.2009 9:27:49 AM   
RSP

 

Posts: 1270
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
Despite a reasonable number of hits on this thread, there are only 3 replies.

Given the number of people clamouring for quarantine ability in the past, haven't you all got views to put across???

If not, don't whinge later when it doesn't do that particular thing that you wanted it to do.

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to ict)
Post #: 5
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 25.Sep.2009 6:52:55 PM   
Cosmas

 

Posts: 3
Joined: 29.Mar.2009
Status: offline
Quite amused to receive an email indicating my post back in March 2009 had been replied to. Quite frankly, I gave up on GFI and moved my customers to Mail Marshal which DOES have a very good quarantine console already. Thats why I didn't post!

(in reply to RSP)
Post #: 6
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 1.Oct.2009 5:29:27 AM   
JFL

 

Posts: 6
Joined: 29.Jul.2009
Status: offline
Hello,

I pleased to learn that quarantine will *proably* be implemented in ME.

To address your points :
- we do not send digest spam to users
- we so prefer a quarantine digest apart from the spam digest
- like RSP I think a configurable rentention time is better, and in some cases, more than 1 month may be useful. It would allow admin to adapt this depending on their available storage and more generally, hardware ressources. A custom, per user (or per group) retention time would be fine (I'll keep email from high level management longer than those for some base employees). It should not be too many works to implement, but it's not a major point.

Apart this, concerning the feature, it seems obvious to me that the user should be able (if the admin allow it; of course) to black list or white list each email address. Note that this may cause some issues, especially with newsletter, if one user blacklist and another one whitelist the same address.

(in reply to Nicks)
Post #: 7
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 9.Oct.2009 7:44:42 AM   
jasonliu

 

Posts: 9
Joined: 9.Jun.2009
Status: offline
To be able to have Quarantine function and release legitimate emails from there will make my job much easier and happier. We used to have Symantec Brightmail and it has this function and I really liked it. Ever since switched to ME, it's been a pain to move those mis-indentified legitimate emails to users' mailboxes from the mailbox where it stores all the catched spam emails by ME.

Answers to the questions:
1. We don't send Spam Digest emails to users.
2. we prefer separate
3. we normally only keep spam emails for at most 2 weeks.

Also it would be nice at the quarantine interface there could be some statistics showing how many emails been processed and how many are catched as spam.

(in reply to JFL)
Post #: 8
RE: FEATURE FEEDBACK: Spam Digest and Spam Quarantining - 22.Oct.2009 5:04:40 AM   
Bitnisse

 

Posts: 3
Joined: 16.Oct.2009
Status: offline
We store all spam mails or potentually spam mails in separate folders. Today we do send digest mails to users. We have designed our own application that once a day looks trough out a SQL database and generates an email for the user showing all the mails cought my ME. The user now have the oppertunity to hit a link in the mail that send us a mail. The release of a mail is a manualy process. This application was designed for a customer that recieve more than 1 million spam mail a day.

To adress your point:
1. We do send spam digest mails to users. With our own application.
2. I think we will prefer a separate digest mail
3. We keep quarantined mail for 4 weeks.

Before we upgraded ME to 14.1 the mails was easy to find in the quarantien folder. But after 14.1 upgrade the mails are now stored in a different way, which make the life a bite more difficult. So an oppertunity to send digest within the ME will be a plasure.

(in reply to jasonliu)
Post #: 9
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> FEATURE FEEDBACK: Spam Digest and Spam Quarantining Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts