MSG240

Size: px

Start display at page:

Download "MSG240"

鹤麻
4 years ago
Views:

MSG 240 企业如何有效阻挡 SPAM 与 SPIM 胡义咨询顾问上海星移软件有限公司概述垃圾邮件问题 Exchange 如何阻挡垃圾邮件现有方法及面临的挑战 Sender ID & SPF 新的危机 SPIM LCS 如何帮助企业阻挡 SPIM IIMF for LCS 总结垃圾邮件问题垃圾邮件占了 70% 电子邮件流量仅三年前才 8% 每天有 145 亿封垃圾邮件每年消耗全球商家

1 MSG 240 企业如何有效阻挡 SPAM 与 SPIM 胡义咨询顾问上海星移软件有限公司概述垃圾邮件问题 Exchange 如何阻挡垃圾邮件现有方法及面临的挑战 Sender ID & SPF 新的危机 SPIM LCS 如何帮助企业阻挡 SPIM IIMF for LCS 总结垃圾邮件问题垃圾邮件占了 70% 电子邮件流量仅三年前才 8% 每天有 145 亿封垃圾邮件每年消耗全球商家 205 亿美元威胁安全和隐私病毒盗取身份证件内容低投入 + 高利润 + 匿名企业对阻挡垃圾邮件的需求误报 : 首要顾虑尽量在网关阻挡使用户看不到减少对网络带宽和其他系统资源的影响对管理的要求端对端的解决方案简化管理公司和最终用户之间的平衡现有方法 Exchange 如何阻挡垃圾邮件 This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 1

2 现有方法 SMTP 邮件网关服务器 Transport 接受 / 拒绝列表实时阻止名单 (RBL) 发件人 / 收件人过滤 Exchange Server 2003 智能过滤器 (IMF) 第三方产品 Message + SCL 邮箱服务器 Store 垃圾邮件文件夹垃圾邮件? 收件箱 SCL = Spam Confidence Level 垃圾邮件信任级别垃圾邮件? 收件箱 Outlook 内容分检垃圾邮件文件夹 Outlook 2003 Exchange 2003 OWA 启用过滤器后的邮件流 telnet mail1.contoso.org 25 连接控制 EHLO domain.com MAIL FROM: joe@domain.com 全局接受列表全局拒绝列表发件人过滤 RCPT TO: sally@contoso.org RBL 特例收件人收件人过滤 RBL 过滤过滤不存在的收件人 DATA <CRLF>.<CRLF> EOD 检查 From 字段 (P2) 满足发件人过滤智能邮件过滤器网关阈值现有方法的局限性 Exchange 2003 SP2 给我们提供什么发件人过滤没有实际应用价值收件人过滤无法避免 Harvest 攻击连接过滤如果 Exchange 不做为邮件网关? RBL 严重依赖于 Black List 提供商不及时连接过滤 SMTP 过滤内容过滤入站邮件处理规则 Exchange 2003 SP2 AntiSpam Sender ID Filtering 连接过滤 Exchange 2003 可以不作为邮件网关 SMTP 过滤 SMTP tar pit 内容过滤 IMF Anti-Phishing Custom Message Weight Sender ID Filtering This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 2

3 Sender ID 记录 -all 该域不会向外发送邮件 mx -all 入站 SMTP 服务器同样用于向外发送该域的邮件 ip4: /24 all 仅仅允许来自特定地址段的 IP 向外发送该域的邮件 mx include:myesp.com all 外包 example.com TXT spf2.0/pra ip4: /24 all PRA 检测 Sender ID 记录 Sender ID 实例 X-Gmail-Received: d43ef46a568dee920d77e8fdd847c55ef Delivered-To: Received: by with SMTP id d46cs7866rng; Sat, 25 Dec :11: (PST) Received: by with SMTP id p76mr241897rna; Sat, 25 Dec :11: (PST) Return-Path: Received: from mail16.hi5.com (mail16.hi5.com [ ]) by mx.gmail.com with ESMTP id 79si63813rna; Sat, 25 Dec :11: (PST) Received-SPF: softfail (gmail.com:: domain of transitioning does not designate as permitted sender) Received: from sherry ( ) by mail16.hi5.com (PowerMTA(TM( PowerMTA(TM) ) v3.0r4) id hpl56806tqof; Sat, 25 Dec :09: (envelope-from <bomt_zhang@hotmail.com< bomt_zhang@hotmail.com>) Message-ID: < JavaMail.root@sherry.hi5.com> From: Bomt Zhang <bomt_zhang@hotmail.com< bomt_zhang@hotmail.com> To: abby.hu@gmail.com Subject: Invitation Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=" =_Part_346527_ " Sender ID Exchange 2003 SP2 AntiSpam 部署实例微软 IT External DNS 两个 SMTP 虚拟服务器对进出两个方向的邮件作不同的处理 ( 身份验证, 过滤 ) 先过滤垃圾邮件再检查病毒 SMTP Connector Address space *; DNS Internet Inbound SMTP VS (2) Front End SMTP Gateway Outbound SMTP VS (1) External DNS Settings To Exchange Hubs From Exchange HUBs Inbound SMTP Virtual Server Apply Sender Filter Apply Recipient Filter Apply Connection Filter Apply IMF Anonymous Resolve Anonymous Basic Authentication Requires TLS Encryption Integrated Windows Auth. Relay for Anonymous Relay for Authenticated Exchange 2003 网关 IP Restrictions Fully Qualified Domain Name Default Exchange 2003 Routing HUBs Outbound SMTP Virtual Server Apply Sender Filter Apply Recipient Filter Apply Connection Filter Apply IMF Anonymous Resolve Anonymous Basic Authentication Requires TLS Encryption Integrated Windows Auth. Relay for Anonymous Relay for Authenticated IP Restrictions Fully Qualified Domain Name mail.microsoft.com 邮箱服务器 This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 3

4 新的危机 SPIM 什么是 SPIM? IM + SPAM Spim 呈爆炸性成长 2004 年底 15 亿条威胁通过 IM 传播病毒通过 IM 发布广告嵌入 IM 的超文字链接 LCS 如何帮助企业阻挡 SPIM LCS 2005 SP1 内建 IMFilter LCS 2005 SP1 提供额外插件智能即时消息筛选器增强的 URL 筛选功能增强的文件筛选器控制记录功能智能即时消息筛选器增强的 URL 筛选功能阻止所有 Intranet 和 Internet 超链接阻止包含超链接的即时消息增强的文件传输控制阻止特定文件扩展名的文件传输请求阻止所有文件传输请求 IIMF for LCS 2005 SP1 总结在和垃圾消息的斗争中没有万能药在这场斗争中, 微软公司不断增加阻挡垃圾邮件的新功能和不断创新技术我们的目标是通过结合微软公司和第三方合作伙伴的产品, 为减少垃圾邮件提供更加完善的端对端解决方案 The Sender ID Framework Exchange 2003 Product Team Blog LCS 2005 IIMF Overview This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 4

5 This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. 5

幻灯片 1

幻灯片 1 课程编号 :MSG331 Office Communications Server 2007 不 Exchange Server 2007 协同应用案例演示 UC 熟知系列主要内容沟通现状基础架构的挑戓统一沟通模式统一通讯革命整合 Exchange UM 不 OCS 的好处 OCS 不 Exchange 协同