GFI MailEssentials 10.1 Adds Directory Harvesting Detection and SPF Support To Its Anti-Spam Arsenal
London, UK, 18 October, 2004 – GFI MailEssentials for Exchange/SMTP 10.1 is one of the first server-based anti-spam solutions to support the anti-forgery Sender Policy Framework (SPF). SPF is rapidly gaining acceptance by leading organizations as a key method of blocking spam through sender authentication. The framework permits users to check automatically whether a particular email sender is forged. In its ongoing bid to help users win the battle against spam, GFI is offering the SPF module as freeware. Version 10.1 also detects directory harvesting, a method used by spammers to email as many recipients as possible within one domain.
Eliminates directory harvesting
Spammers often try to guess recipient addresses by generating multiple random email addresses at a domain. They then send their spam mail to all those addresses. GFI MailEssentials counteracts this by checking the validity of all the email addresses included in the mail sent, via a query to Active Directory; if they are not all valid, it flags the mail as spam.
About the Sender Policy Framework (SPF)
As most of today’s spammers spoof email addresses, it is important to be able to check whether an email is genuine or if it has been sent from a forged sending address. This can be done via SPF – the Sender Policy Framework – which allows users to test whether a particular email originates from its claimed source (more information at http://spf.pobox.com). If, for example, a spammer falsifies an AOL address and tries to spam UserA, he would need to connect from somewhere other than AOL. When UserA receives the spammer’s mail, it appears to be sent from an AOL address, namely, forged_address@aol.com. However, the recipient does not need to take the sender’s word for it: Instead, UserA can ask AOL if the IP address comes from their network. Through SPF, this checking can be done automatically, thereby eliminating spam that originates from spoofed senders.
How SPF works
SPF requires that the sender’s company has published its mail server in an SPF record. When receiving a message from a domain, GFI MailEssentials checks those records to make sure the mail is coming from where it says it is. For example, if an email is sent from xyz@CompanyABC.com, then companyABC.com must publish an SPF record in order for SPF to be able to determine if the email was really sent from the companyABC.com network, or whether it was spoofed. If an SPF record is not published by CompanyABC.com, the SPF result will register as ‘unknown’. SPF is rapidly gaining ground and major sites have committed to the project. More information can be found on http://spf.pobox.com.
“In the last twelve months, the email industry has wholeheartedly acknowledged that sender authentication is a necessary piece of the anti-spam puzzle. While the IETF [the Internet Engineering Task Force] considers multiple possible approaches, the industry is quietly rolling out SPF because it delivers immediate benefits today. I applaud GFI Software for joining the movement,” said Meng Weng Wong, CTO and Founder of Pobox.com and author of SPF.
As IT guru Tim Berners-Lee said recently in an interview with InternetNews: “I think SPF is something that should be more widely used to thwart email address forgery. The technology is there to deal with this. SPF can be used right now to distinguish legitimate mail from illegal mail containing viruses before any message data is transmitted. I encourage people to use SPF because it provides the technology that works.”
Obtaining the freeware version
The freeware version can be downloaded from http://www.gfi.com/mes/. The download is a trial version of GFI MailEssentials 10.1 (15Mb), however the product’s SPF and blacklist checking features, together with one disclaimer, remain active as freeware after the 60-day evaluation period.
About GFI MailEssentials for Exchange/SMTP (commercial version)
GFI MailEssentials offers spam protection at server level and eliminates the need to install and update anti-spam software on each desktop. GFI MailEssentials offers a fast set-up and a high spam detection rate using Bayesian analysis and other methods – no configuration required, very low false positives through its automatic whitelist, and the ability to automatically adapt to the email environment to constantly tune and improve spam detection. GFI MailEssentials also adds email management tools to your mail server: disclaimers, mail archiving and monitoring, Internet mail reporting, list server, server-based auto replies and POP3 downloading.
GFI MailEssentials pricing is highly competitive, with a 50-user version costing just US$495, as an example. GFI MailEssentials can be purchased in a bundle with GFI MailSecurity, GFI’s email content security product, at pricing starting at US$450 for 10 mailboxes. More information about GFI MailEssentials and a trial version are available at: http://www.gfi.com/mes/.
About GFI
GFI is a leading provider of network security, content security and messaging software. Key products include the GFI FAXmaker fax connector for Exchange and fax server for networks; GFI MailSecurity email content/exploit checking and anti-virus software; GFI MailEssentials server-based anti-spam software; GFI LANguard Network Security Scanner (N.S.S.) security scanning and patch management software; GFI Network Server Monitor that automatically sends alerts, and corrects network and server issues; GFI LANguard Security Event Log Monitor (S.E.L.M.) that performs event log based intrusion detection and network-wide event log management; and GFI LANguard Portable Storage Control that enables network-wide control of removable media. Clients include Microsoft, Telstra, Time Warner Cable, Shell Oil Lubricants, NASA, DHL, Caterpillar, BMW, the US IRS, and the USAF. GFI has offices in the US, the UK, Germany, Cyprus, Romania, Australia and Malta, and operates through a worldwide network of distributors. GFI is a Microsoft Gold Certified Partner and has won the Microsoft Fusion (GEM) Packaged Application Partner of the Year award. For more information about GFI, visit http://www.gfi.com