IBM AH0QXML User Guide - Page 10

viii

Lotus Domino 6 spam Survival Guide for IBM eServer

Ted Chappell

is a Managing Principal and co-founder of Eagle Technology

Consultants LLC, an IBM Premier Business Partner, where he has worked for the

past five years. Ted has ten years of experience in information technology

working on various platforms. His most recent work includes the development of

SpamEraser, Eagle Technology Consultants' anti-spam tool for Lotus Notes and

Domino. Ted holds a BA degree in math and economics from Emory University in

Atlanta, Georgia. Ted can be contacted via e-mail at [email protected]; his

company

’

s Web site is http://www.eagletc.com.

Beth Anne Collopy

is a Senior Technical Instructor working in the Worldwide

Product Introduction and Technical Support Organization within Lotus Software

Group. Her primary responsibility is providing instructional training on Notes and

Domino to individuals within the Lotus Customer Support Organization. She

joined Lotus in 1997 and supported Domino Mail and Messaging until moving to

the Performance and Learning Group in 2001 as a Instructor. Prior to joining

Lotus, she worked as a Network Manager and as a Notes Administrator

(beginning with Release 3).

Kris Hansen

is a Chief Technology Officer at eWorld Enterprise Solutions, Inc. in

Honolulu, Hawaii. He has nine years experience working with Lotus Domino

infrastructure and development and is an IBM Certified Solutions Advisor,

Solutions Designer, and a Certified Lotus Professional in Lotus Domino

administration. His areas of expertise include systems architecture, messaging

infrastructure, UNIX administration, Domino administration and development,

and DB2 and WebSphere Application Server implementation on UNIX platforms.

Greg Kelleher

is the product manager for Windows and Linux platforms at Lotus

software.

Mark Ramos

is a co-founder and the chief technologist of Granite Software. He

was the primary developer of Granite's flagship product, ZMerge, a data

integration tool and past winner of the Lotus Beacon Award. He developed the

SNA APPN network driver for Lotus Notes/Domino and the Text Connector for

Lotus Enterprise Integrator (LEI). He has over 20 years of IT experience,

specializing in Notes API development. Most recently he directed the

development of Granite's newest product, spamJam, an anti-spam product for

Domino. More information about Granite Software can be obtained from their

Web site: http://www.gsw.com

Bruce Walenius

is a Critical Situation Manager for the Lotus Software Group;

his geographic area of responsibility includes Europe, the Middle East, and

Africa. Bruce has worked for IBM for ten years, all of it in the support

organization. He started in 1993 as a software support specialist in Canada

before transferring to Lotus France in 1998 to become first a Lotus Support

Account Manager, and then the Critical Situation Manager for EMEA West and

Section	Page
Front cover	1
Contents	5
Notices	7
Trademarks	8
Preface	9
The team that wrote this redbook	9
Become a published author	11
Comments welcome	12
Chapter 1. Introduction	13
1.1 Definition of spam	14
1.2 Categorizing spam	14
Chapter 2. Preventing unwanted e-mail and spam	19
2.1 Spam avoidance techniques	20
2.1.1 Passive harvesting attacks	20
2.1.2 Avoiding harvesting	21
2.1.3 Confusing the harvesters	22
2.1.4 Inform Users	22
2.2 How to block spam	24
2.2.1 At the gateway	25
2.2.2 At the server	25
2.2.3 By the end user	26
2.2.4 Selecting the best approach	26
2.2.5 Managing the ongoing anti-spam campaign	27
2.2.6 Summary	28
Chapter 3. Domino 6 anti-spam architecture	29
3.1 The Domino messaging environment	30
3.2 Domino 6 messaging components	32
3.2.1 SMTP Listener/Server	33
3.2.2 Router	35
3.3 Domino 6 anti-spam configuration	35
3.3.1 Server configuration features	36
3.3.2 User configuration features	37
3.4 Common problems and solutions	37
Chapter 4. Domino 6 Server anti-spam features	41
4.1 How to detect spam	42
4.1.1 Examining the message properties	42
4.1.2 Separating legitimate e-mail from spam based on content	43
4.2 Controlling connections from spammers	44
4.2.1 DNS Blacklist filters	44
4.2.2 Inbound Intended Recipients Controls	48
4.2.3 Disable routing mail to groups	51
4.2.4 Inbound connection controls	53
4.2.5 Inbound sender controls	54
4.3 Controlling delivery of spam	57
4.3.1 Server mail rules	57
4.4 Controlling use of your server as a relay	66
4.4.1 Inbound relay controls	66
4.4.2 Inbound relay enforcement	71
4.5 Protecting your Domino server from active address harvesting attacks	74
4.5.1 SMTP harvesting attacks	74
4.5.2 Spam mail bombing	74
4.5.3 Direct SMTP RCPT TO harvesting	74
4.5.4 Defending against active attacks	75
Chapter 5. Using mail file rules to prevent spam	77
5.1 Distinguishing between spam and legitimate e-mail	78
5.2 Mail file rules	80
5.2.1 Setting up mail file rules	80
5.2.2 Developing anti-spam mail file rules	83
5.2.3 Viewing mail rules and the evaluation sequence	89
5.2.4 Monitoring mail file rules	90
Chapter 6. Third party anti-spam products	93
6.1 Anti-spam products for Notes and Domino	94
6.1.1 spamJam for Lotus Notes and Domino	94
6.1.2 SpamEraser for Lotus Notes and Domino 6	97
6.1.3 iQ.Suite	100
6.1.4 ScanMail for Lotus Notes with eManager	101
6.1.5 XM SpamStop	104
6.1.6 Other anti-spam products for Notes and Domino	106
6.2 Anti-spam server and gateway products and services	106
6.2.1 BrightMail Anti-Spam 4.0 from BrightMail, Inc.	106
6.2.2 ActiveState PureMessage	107
6.2.3 Trend Micro Inc. products	109
6.2.4 Other anti-spam server or gateway products and services	110
Related publications	111
IBM Redbooks	111
Referenced Web sites	111
How to get IBM Redbooks	112
IBM Redbooks collections	112
Index	113

IBM AH0QXML User Guide - Page 10

Ted Chappell, Beth Anne Collopy, Kris Hansen, Greg Kelleher, Mark Ramos, Bruce Walenius

Page 10 highlights