|
SpamViper combines
dozens of different anti
spam filters with an intuitive yet
powerful interface to allow the subscriber to
use webmail or just
control the spam
settings and deal with messages in quarantine.
The subscriber has both
webmail and industry standard POP3
access to their
email.
SpamViper filtering
consists of:
-
Multi Level
virus scanning. The email is broken apart
into a separate file for each attachment and
message body part, then
each part is scanned by our state of the art
virus software. The virus databases are
updated every 20 minutes so new viruses are
caught before they can spread.
-
The Distributed
CheckSum System.
This system tracks how many copies of similar
emails have been received by other mail
servers in the DCC network. The more copies
have been seen in the last 24 hours, the more
likely it is to be spam. We add more than 20 Million spam signatures to our database each day!
-
Heuristic rules
examining email subject and body for literally
thousands of key phrases and layouts. These
systems use Bayesian rule sets to learn from
feedback from all of our subscribers. If a
spam slips through
and the subscriber forwards it to the “SPAM@YOURDOMAIN”
address the system learns – if a message is
marked as spam,
but is not and the subscriber forwards it to
the NOTSPAM@YOURDOMAIN address the system
learns.
-
Open relay Block
lists. These internet databases track the IP
addresses of mail servers known to be wide
open to spammers.
-
Known
Spammer databases.
-
An email
signature database. Once a given email has
been positively identified as
spam a digital
“fingerprint” is taken of the email and
entered in a database. Every new email is
checked against this database – if the
fingerprint matches there is 100% surety that
the email is spam.
In order to eliminate “false positives” a team
of five full time (and
very stressed) employees reviews every
new mail fingerprint before it is entered in
the database.
These systems
run on multiple load balanced clusters of
servers. We frequently see as many as 20,000
inbound messages
per minute
to our filtering clusters with no degradation of
service. Servers are added to clusters as
needed to always stay ahead of the growth curve. |