IBM AH0QXML User Guide - Page 15

Chapter 1. Introduction

3

±

Hoaxes. E-mail chain letters requiring you to perform an action or suffer

serious consequences.

±

Fake virus warnings, forged messages, or deceitful mail attempting to get the

recipient to respond in a certain way.

±

Mail trying to entice you to visit certain sites, often pornographic, or of very

questionable nature.

±

Malicious mail designed to interrupt regular Internet traffic or flood mailboxes

or mail routers.

Each one of these categories of spam is trying to make the recipients react in a

certain way, most often to their own detriment. Let's look at each one of the

categories more closely:

±

Advertisers trying to sell a product or service to as large an audience as

possible.

–

This is the most common type of spam.

–

The idea is to reach as large an audience as possible. Statistics show that

more than 99% of people who receive these types of offers delete them

without opening them. However, if a spammer sends their message out to

1 million people, and only 1 out of 100 people actually read the message,

the spammer is still reaching an audience of 10,000 prospective clients.

–

Some of the most widely distributed advertisement-type spam mailings

include offers to reduce or enlarge various body parts, invitations to buy

prescription drugs at discount prices, and offers to refinance your home

loan.

±

Mail designed to cheat or mislead unsuspecting or gullible Internet mail

recipients with incredible get-rich-quick schemes.

–

There are many known examples of this type of scam. For example,

someone is stuck in a war-torn country but has managed to secrete

millions of dollars into a Swiss bank account, and only needs you to send

them airfare and you will be entitled to a percentage of the treasure.

–

Another example of get-rich-quick spam is the pyramid mailer;

“

Just send

5 dollars to this person for this report, and move your name up one rung

on the letter. Then send it out to as many people as you can.

”

.

–

Some other spam which falls into this category is not so obvious. For

instance, a reputable-sounding investment firm believes a certain stock is

hideously undervalued and urges you to buy it while it is low. The mail is

made to look as professional and as serious as possible.

All of these examples are messages which are designed to deceive the end

user.

±

Hoaxes: e-mail chain letters requiring you to perform an action or suffer

serious consequences.

Section	Page
Front cover	1
Contents	5
Notices	7
Trademarks	8
Preface	9
The team that wrote this redbook	9
Become a published author	11
Comments welcome	12
Chapter 1. Introduction	13
1.1 Definition of spam	14
1.2 Categorizing spam	14
Chapter 2. Preventing unwanted e-mail and spam	19
2.1 Spam avoidance techniques	20
2.1.1 Passive harvesting attacks	20
2.1.2 Avoiding harvesting	21
2.1.3 Confusing the harvesters	22
2.1.4 Inform Users	22
2.2 How to block spam	24
2.2.1 At the gateway	25
2.2.2 At the server	25
2.2.3 By the end user	26
2.2.4 Selecting the best approach	26
2.2.5 Managing the ongoing anti-spam campaign	27
2.2.6 Summary	28
Chapter 3. Domino 6 anti-spam architecture	29
3.1 The Domino messaging environment	30
3.2 Domino 6 messaging components	32
3.2.1 SMTP Listener/Server	33
3.2.2 Router	35
3.3 Domino 6 anti-spam configuration	35
3.3.1 Server configuration features	36
3.3.2 User configuration features	37
3.4 Common problems and solutions	37
Chapter 4. Domino 6 Server anti-spam features	41
4.1 How to detect spam	42
4.1.1 Examining the message properties	42
4.1.2 Separating legitimate e-mail from spam based on content	43
4.2 Controlling connections from spammers	44
4.2.1 DNS Blacklist filters	44
4.2.2 Inbound Intended Recipients Controls	48
4.2.3 Disable routing mail to groups	51
4.2.4 Inbound connection controls	53
4.2.5 Inbound sender controls	54
4.3 Controlling delivery of spam	57
4.3.1 Server mail rules	57
4.4 Controlling use of your server as a relay	66
4.4.1 Inbound relay controls	66
4.4.2 Inbound relay enforcement	71
4.5 Protecting your Domino server from active address harvesting attacks	74
4.5.1 SMTP harvesting attacks	74
4.5.2 Spam mail bombing	74
4.5.3 Direct SMTP RCPT TO harvesting	74
4.5.4 Defending against active attacks	75
Chapter 5. Using mail file rules to prevent spam	77
5.1 Distinguishing between spam and legitimate e-mail	78
5.2 Mail file rules	80
5.2.1 Setting up mail file rules	80
5.2.2 Developing anti-spam mail file rules	83
5.2.3 Viewing mail rules and the evaluation sequence	89
5.2.4 Monitoring mail file rules	90
Chapter 6. Third party anti-spam products	93
6.1 Anti-spam products for Notes and Domino	94
6.1.1 spamJam for Lotus Notes and Domino	94
6.1.2 SpamEraser for Lotus Notes and Domino 6	97
6.1.3 iQ.Suite	100
6.1.4 ScanMail for Lotus Notes with eManager	101
6.1.5 XM SpamStop	104
6.1.6 Other anti-spam products for Notes and Domino	106
6.2 Anti-spam server and gateway products and services	106
6.2.1 BrightMail Anti-Spam 4.0 from BrightMail, Inc.	106
6.2.2 ActiveState PureMessage	107
6.2.3 Trend Micro Inc. products	109
6.2.4 Other anti-spam server or gateway products and services	110
Related publications	111
IBM Redbooks	111
Referenced Web sites	111
How to get IBM Redbooks	112
IBM Redbooks collections	112
Index	113

IBM AH0QXML User Guide - Page 15

someone is stuck in a war-torn country but has managed to secrete - stock

Page 15 highlights