Skip to main content

Spam Filtering in a Small Business Environment, a Case Study

This case study describes the process of researching and implementing a filter for email 'SPAM' in an organization of modest size running Microsoft Exchange 5.5 and IMC. At the time of the implementation in Fall 2002 there were few commercial software products available to address this issue in a Microsoft environment. While open source approaches to the problem were fairly mature the organization does not have expertise with open source software so a commercial solution was desired. The article outlines the effect of SPAM in our environment the process we went through in selecting and installing an email filtering system and the resulting situation today. It discusses the network environment in place before the implementation and compares native capabilities in MS Exchange 5.5 against our requirements. Based on needs that were not addressed in Exchange IMS I discuss why we chose commercial solutions: X-Wall by Data Enter and SpamAssassin by Deersoft and how they fit in our environment. The philosophy used to make this decision is examined along with the set up and installation of our system. The results of the final system setup are discussed along with 'lessons learned'.

1213 (PDF, 2.27MB)

26 Sep 2003
ByRichard Snow
Share
All papers are copyrighted

No re-posting of papers is permitted

Related Content

SANS 2025 CTI Survey Webcast & Forum: Navigating Uncertainty in Today’s Threat Landscape

Research Paper

This paper explores results from the SANS 2025 CTI Survey, with insights into how cybersecurity...

  • 20 May 2025
  • Rebekah Brown, Andreas Sfakianakis

ARMO’s Behavioral Cloud Application Detection and Response (CADR) Platform

Research Paper

This paper explores how ARMO Platform is attempting to solve the challenge with the industry’s first behavioral cloud application detection and response (CADR) product.

  • 18 Mar 2025
  • Moses Frost

ASPM: Understanding the New Application Security Landscape

Research Paper

Malicious actors continue to prey on the challenges of rapid software development cycles and cloud computing adoption. This paper examines where an application security posture management (ASPM) solution comes in.

  • 18 Mar 2025
  • Chris Edmundson, SANS Institute

2025 ICS/OT Cybersecurity Budget: Spending Trends, Challenges, and the Future

Research Paper

This white paper explores the findings of the 2025 SANS Survey on ICS/OT Security Budgets.

  • 3 Mar 2025
  • Dean Parsons

2025 SANS Detection Engineering Survey: Evolving Practices in Modern Security Operations

Research Paper

To dive deep into understanding the current state and future trends of this critical field, SANS has partnered with Anvilogic to conduct a comprehensive survey of Detection Engineering professionals across various industries. Dive into the findings in this whitepaper.

  • 24 Feb 2025
  • Terrence Williams

Recover an RSA Private Key from a TLS v1.2 session

Research Paper

Cyberattacks happen every day.Most organizations have administrative and technical controls...

  • 22 Jun 2022

Recommendations for small/medium-sized businesses enabling incident response

Research Paper

Security incidents are inevitable. While large businesses can afford security teams to prepare and...

  • 17 Jan 2022

Are You Hitting the Mark with DMARC?

Research Paper

As organizations struggle to protect their end-users from email attacks despite pragmatic methods...

  • 12 Feb 2020

Practical implementation of the Australian Signals Directorate Essential Eight Maturity Model to Level Three within residential University colleges.

Research Paper

The Australian Signals Directorate (ASD) Essential Eight Maturity Model is a subset of the ASDs...

  • 21 Aug 2018

Privacy and the Internet of Things

Research Paper

The Internet of Things has gotten a lot of attention over the past year or so, and for good reason....

  • 25 Oct 2017

The Information We Seek

Research Paper

Whether you are performing a penetration test, conducting an investigation, or are skilled attackers...

  • 25 Oct 2016

Windows Installed Software Inventory

Research Paper

The 20 Critical Controls provide a guideline for the controls that need to be placed in our networks...

  • 7 Sep 2016
  • Jonathan Risto

Applying Machine Learning Techniques to Measure Critical Security Controls

Research Paper

Implementing and measuring Critical Security Controls (CSC) requires analyzing all data types...

  • 6 Sep 2016

Android Security: Web Browsers and Email Applications

Research Paper

Mobile devices are popular communication tools that allow people to stay connected in most places at...

  • 29 Aug 2016

Simple Approach to Access Control: Port Control and MAC Filtering

Research Paper

Many times businesses will spend time and money on 'Magic Bullet' security and focus on a single...

  • 22 Aug 2016

Generating Hypotheses for Successful Threat Hunting

Research Paper

Threat hunting is a proactive and iterative approach to detecting threats. Although threat hunters...

  • 15 Aug 2016
  • Robert M. Lee, David Bianco

Evaluating Cyber Risk in Engineering Environments: A Proposed Framework and Methodology

Research Paper

Evaluating Cyber Risk in Engineering Environments: A Proposed Framework and Methodology

  • 31 May 2016

Detecting a Targeted Data Breach with Ease: A SANS Product Review

Research Paper

A product review by Jake Williams. It examines LightCyber Magna, focusing on itseffectiveness in...

  • 21 Oct 2015
  • Jake Williams

Case Study: Critical Controls that Sony Should Have Implemented

Research Paper

On November 24, 2014, an incident almost pulled right out of a 90's hacker movie transformed into a...

  • 22 Jun 2015

The What, Where and How of Protecting Healthcare Data

Research Paper

Mitigating healthcare data-loss risk by understanding the What, Where, and How of Protecting...

  • 6 Apr 2015
  • James Tarala

Subscribe to GIAC’s Monthly Newsletter

Receive expert insights, priority access to certifications, essential updates on regulatory changes and industry developments.