Get Aggressive at Fighting Spam by Re-training the Bayesian Learning Process in MDaemon

Fight spam with Bayesian Learning in MDaemon

In certain situations, it may be necessary to retrain your Bayesian Learning database. This can be necessary when spam messages are inadvertently placed in the Bayes non-spam folder, or when non-spam messages are placed in the Bayes spam folder.

To reset your Bayesian Learning and start training it again from scratch, you can perform the following steps:

1. Stop the MDaemon service.
2. Verify that the MDaemon executables (MDaemon.exe, CFEngine.exe, MDSpamD.exe, WorldClient.exe) have all exited memory using Windows task manager.
3. Rename the folder “/MDaemon/SpamAssassin/Bayes/” to”/MDaemon/SpamAssassin/Bayes.old/”
4. Re-launch MDaemon.
5. Go to Security | Spam Filter | Bayesian Classification, then click on the Learn button.

At this point, MDaemon recognizes that the Bayes folder isn’t there when the learn process is triggered, so it builds a new Bayes folder.

You will then need to feed Bayesian learning at least 200 spam and 200 non-spam messages (although the more the better) to start the Bayesian learning process again. Here is a knowledge base article on training the Bayesian learning process in MDaemon.

The Bayesian learning engine won’t process new messages until the administrator has taught it 200 spam and 200 non-spam messages. So even if an administrator were to manually press the Learn button OR have MDaemon learn automatically at midnight, the Bayesian engine  wouldn’t apply itself to new messages even though the new folder is created.

Once MDaemon recognizes that Bayesian learning has learned more than 200 spam and 200 non-spam messages, it will start applying what it has learned to new messages.

You can run a script to determine how many messages the Bayesian filter has learned from. This will come in handy for administrators who need to know how many more messages to feed the Bayesian filter. This process is explained in this knowledge base article.

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  

2016 Year in Review

2016 Year in ReviewWell, another year is almost over, but over the past year, we’ve managed to pack in lots of new features and enhancements to our products, and thanks to people like you sharing your ideas with us via the Alt-N Idea Engine, or on our community forums, our development staff can have a direct dialog with customers.  For 2016, we’ve added the following new features to MDaemon:

  • Two-factor authentication – Requires users to provide a verification code in addition to the username and password.
  • Spambot detection – When multiple messages claiming to come from the same sender are received from multiple IP addresses, a spambot is often the culprit. This feature helps keep those pesky Spambots from sending mail to your server.
  • XML API for complimentary applications – Allows third-party developers to integrate complimentary applications (such as CPanel, etc.) with MDaemon.
  • CardDAV support – Allows users to synchronize their contacts with their favorite mobile device or other mail client.
  • ActiveSync migration client – The ActiveSync migration client makes it easy to import data over from any other mail server that supports ActiveSync protocol version 14.1.
  • Third-party chat (XMPP) client – Users now have more options for chatting with their colleagues. In addition to the standard WorldClient Instant Messenger, users can now chat with their favorite XMPP client from their desktop or even their mobile device!
  • Automatic updates – With automatic updates, the administrator no longer has to manually check for new versions and install them. The automatic update feature will notify the postmaster when a new version is available. Updates can be automatically downloaded and installed at a designated time.
  • Centralized management of Outlook Connector settings – Outlook Connector settings can now be pushed out to users. All that’s needed is the email address and password. No more guessing at what to put in the other fields! We’ve updated our Outlook Connector Quick-Start guide to help you get started with this new functionality.

We also released SecurityGateway 4, which includes the following new features:

  • Enhanced anti-spoofing support with DMARC – DMARC allows domain owners to specify what actions to take for messages that don’t align with DKIM or SPF. This helps take out the guesswork on how to handle messages that may be spoofed.
  • Improved user interface for mobile devices – SecurityGateway’s web interface now scales to fit any screen size, so whether you’re using a mobile device or a PC, you’ll see a friendly, responsive interface that has been designed for the screen size you are using.
  • Send mail from each domain’s IP address – When you have more than one IP address on your server, each domain can be bound to a specific IP address. Mail from the domain will be sent from its assigned IP address.

We launched our blog over three years ago to provide another communication channel for our customers, to keep people updated on the latest email industry and security news, tips, product releases, and more. For 2016, we’ve compiled a list of the ten blog posts that generated the most interest. With email security featured prominently in the news over the last year, it comes as no surprise that the topics that generated the most interest revolve around email security and privacy.

Here are the top ten blog posts from 2016:

  1. SSL & TLS Best Practices
  2. New MDaemon Feature Helps Detect Spambots
  3. MDaemon 16.5, with Automatic Updates, WorldClient Categories, & More!
  4. Encrypting vs. Signing with OpenPGP – What’s the Difference?
  5. Encryption Options for Keeping your Private Email Messages Safe
  6. Teach Your Inbox to Recognize Spam
  7. Access your Outlook contacts from Anywhere by Importing them into WorldClient
  8. MDaemon 16 = 2016
  9. Why Passwords May Not Keep your Email Safe
  10. 10 Ways to Reduce Spam in your Inbox

Need a quick video lesson on a particular feature? This year, we also added all of our eLearning videos for MDaemon and SecurityGateway to our YouTube channel.

While 2016 is almost over, our development staff is already hard at work to bring you new & exciting features for 2017, so check back often for the latest updates!

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  

Are You Suffering from Inbox Overload?

Too_Much_Mail

Are you suffering from Inbox Overload? Do you spend too much time trying to keep your inbox under control without losing productivity? Do you find yourself checking your work email well into the evening, or checking personal email during business hours? In today’s always-on, always-connected society, many people struggle with work-life balance. With email being such a ubiquitous communication tool, it is more important than ever to keep the clutter out of your inbox, and to reduce your time spent dealing with email.   These tips can help you keep your inbox organized & free up time that you would have spent managing your email for other, more productive or rewarding tasks.

Keep spam under control

Know how to identify phishing and scams and don’t respond to them
Phishing scams often have the following characteristics:

  • Links in the email asking you to enter your personal information on an online form
  • Threats such as “If you do not fill out the attached form, your account will be deleted.”
  • Spelling and grammar errors
  • Links to malicious sites. It is good practice to hover your mouse over a link in an email before you decide to click on it. Often, phishing emails will show a link to a well-known URL, such as www.amazon.com, but when you hover your mouse over it, the real address that the link points to is a site containing malware, so know how to spot these links & if you are unsure about a link’s legitimacy, do not click on it.
  • Official-looking company logos and graphics. It’s very easy to create a malicious website that looks identical to a legitimate website. When in doubt, never click on an image or link in an email message. Open your browser and manually type in the company’s URL.

Use the Bayesian Learning Feature (Don’t just Delete It)
Spam messages that find their way into your inbox  can be fed into MDaemon’s Bayesian Learning system so that MDaemon’s spam filter can become more accurate over time.  The Bayesian classification system is enabled via Security | Spam Filter |Bayesian Classification in MDaemon.  Make sure the first box “Enable Bayesian Classification” is checked. On the bottom of that screen, you will see the paths to the Bayesian spam and non-spam folders. In WorldClient, a user will see two buttons (a thumbs-up & a thumbs-down button). When that user has been given proper rights to view the Bayesian Learning folders, he or she will be able to mark message as spam or non-spam using these buttons in WorldClient.  More information can be found in the following knowledge base article:

Training the Bayesian Learning Process in MDaemon Pro

Use Extra Email Addresses for Specific Purposes
Do you give the same email address to your friends, family, sales associates, or to just about anyone else who asks for it? If so, then you’re probably getting more spam than you would like. A good practice is to have an email address that you give to friends & family, one for business, and one that you would use for shopping,  or for signing up for mailing lists or newsletters.

Take Action Immediately

When you receive a new email message, it’s good practice to take action on it immediately. A popular method for this is to use the four D’s: delete it immediately, do it (if it can be done in less than two minutes), delegate it (forward it) or defer it (if it will take longer than two minutes). You may also want to archive it or set a reminder to look at it later. You can also file it into another folder (see Create & Use Folders later in this article).

Unsubscribe from Newsletters You No Longer Need

Are you still receiving newsletters from something you signed up for three years ago? If they are no longer relevant or you are no longer interested, you should be able to unsubscribe from them. Newsletters from reputable sources will often include instructions on how to unsubscribe.

Don’t Abuse the “Reply all” Feature

If you received an email addressed to multiple recipients, and you need to reply to the sender, be careful with the “Reply all” feature. If you only need to reply to the message sender, then reply directly & help keep unwanted mail out of others’ inboxes.

Stop Forwarding from Old Accounts

When someone changes his or her email address, it is common practice to forward all mail from the old address to the new one – at least until all parties involved have been made aware of the new email address. Often, forwarding will be left active on the old account indefinitely. Over time, once all parties involved have been made aware of the new address, the only mail still being forwarded from the old address tends to be spam or perhaps old newsletters.  At this point, it is safe to turn off forwarding from this account (or delete the account entirely).

Mask Your Email Address on Public Sites

Spam robots are constantly crawling thousands of sites, looking for email addresses they can harvest for their next spam campaign. Some of the most common places these spam crawlers look for email addresses are blogs, message boards, forums, and guest books. If you must post your email address on these sites, consider replacing the @ symbol with <at> and the .com with (dot)com. For example: <frank.thomas>(at)<example> (dot) <com>.

Create & Use Folders

In time, your inbox can become cluttered with all types of email messages. One way to stay organized is to create multiple email folders and label them so that you can categorize your messages for easy retrieval. In WorldClient, you can easily create mail folders (or folders of any other type) via the Options menu.

Use Rules or Filters

You can also create rules to automatically filter messages that meet certain criteria into your other mail folders. In WorldClient, these filters can be created via the Options | Filters menu. For example, I have a special folder created for a particular newsletter that I’m subscribed to. I use the filter to automatically place those messages into the designated folder. Not only does this keep me more organized, but it also keeps me from getting a “New Email” notification for these messages since they aren’t going directly into my Inbox. Fewer notifications = fewer interruptions = greater productivity.

Keep Inbox Message Count to a Minimum

When you check your email, decide what you want to do with any new messages that arrive (see Take Action Immediately above). By acting immediately, you will keep your inbox at a reasonable size. Inbox Zero is a technique many people use to keep their inboxes down to a manageable size. You can learn more about Inbox Zero in this blog post.

Send & Receive Less Frequently

In today’s face-paced business environment, it’s quite easy to get distracted with phone calls, emails, meetings, and other distractions. If your mail client is notifying you every three minutes that you have an email message waiting, you may be tempted to click on it every time. Ask yourself: Does this have to be tended to at this very moment? You might try configuring your mail client to check for new mail every 15 minutes instead of every three minutes. If a matter must be addressed in less than 15 minutes, then it may be better to meet in person or over the phone.

These are just a few tips to help keep your Inbox under control. With these practices, your inbox will be better organized, you’ll receive less junk email, and you’ll be spending less time dealing with email & more time doing what you’d rather be doing – being productive.

Do you have other Inbox Management tips? Share them with us via the Comments section below!

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  

Beware of New Amazon.com Phishing Scam

Scam AlertThe holidays are upon us, and with all of the giving and sharing come scams aimed at exploiting human nature and stealing our personal information, such as names, addresses and credit card numbers. This year, the scammers are at it again, with a phishing scam designed to look like an email from Amazon.com claiming that there is a problem processing your order. The scam asks you to click on a link to verify your personal information. A good example of this scam email is described on the AARP blog.

As a reminder, here are a few tips to avoid falling victim to phishing scams.

  • Never click on unfamiliar or suspicious links. If a link claims to refer to a familiar website, then manually enter the web address in the address bar.
  • Hover your mouse over images & links to review the URL they refer to.
  • Beware of “Unsubscribe” links in phishing emails. When clicked, these links can let the spammer know that your address is valid, which often leads to more spam.
  • Never reply to spam or unsolicited messages.

For more tips on how to avoid these & other scams, click here to review our post on protecting your email privacy, and stay safe this holiday season!

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  

Outlook Connector Performance Tips

With the recent release of Outlook Connector 4.0, I wanted to review with you some guidelines for improving the performance of Outlook Connector. Outlook’s performance is affected by many things, including the amount of data it has to keep track of, any add-ons that are installed, how often it checks for new mail, and various other factors. The following guidelines will help ensure you get the best performance out of Outlook when using Outlook Connector.

  1. With each new version of Outlook Connector, various performance enhancements are made, thus, we recommend using the latest version of Outlook Connector on the MDaemon server and the latest Outlook Connector plug-in on each client. On the MDaemon server, you can check the version of Outlook Connector that’s installed by navigating to Help – View the release notes for your version of Outlook Connector. Users can verify their version of the Outlook Connector plug-in by clicking on the “About” tab on the Outlook Connector toolbar in Outlook. Click here to download the latest version of Outlook Connector. On this page, click on the “Download Now” button to download Outlook Connector on the server. There are also links to download the 32-bit and 64-bit versions of the Outlook Connector client.
  2. We recommend using Outlook Connector with MDaemon 14 and above. Newer versions of MDaemon also have various performance enhancements. You can get the latest version of MDaemon here.
  3. We recommend disabling all Outlook Add-ins except the Outlook Connector plug-in. In Outlook 2016, 2013 & 2010, add-ins are located under File – Add-ins. In Outlook 2007, they’re located under Tools – Trust Center – Add-ins.
  4. Regular defragmentation of the MDaemon server’s hard disk is recommended. Server performance can be further improved by reducing the amount of logging MDaemon is doing (Setup – Server Settings – Logging – Settings) along with moving the Logs folder and User, Public and Queues folders to a physically separate disk. When moving logs, queues, or public folders to a separate drive, simply map a drive letter to the drive, then update the Directories section of the MDaemon.lni file (located in the MDaemon/App directory) with the new path to these directories.

    MDaemon directories
    Where MDaemon stores mail, queues, logs, etc.
  5. We recommend periodically purging and compacting the Outlook Connector database file (local cache). Follow these steps to compact the local cache file:
    1. Make sure Outlook is shut down, and navigate to the Windows control panel.
    2. Click on the Mail control panel.
    3. Click on Email Accounts.
    4. Double-click on your Outlook Connector account.
    5. Click on the Database Management tab.
    6. Locate the Purge Database section and click on the Purge button.
    7. Locate the Compact Database section, and click on the Compact button. You can also check “Compact database on Outlook shutdown” to compact the database each time Outlook is shut down.

      Outlook Connector Database Managemen
      Outlook Connector Database Managemen
  6. The local Outlook Connector cache file should be excluded from real-time scanning by third party desktop antivirus applications. By default, the local Outlook Connector cache is located at C:/Documents and Settings/-username-/Application Data/Alt-N/ Outlook Connector 4.x/ProfileName/account-name/User’sEmail@YourCompany.com.
  7. Outlook should only be configured to use HTML or Plain Text format for sending emails. Depending on the version of Outlook you are using, these settings can usually be found via Tools – Options – Mail Format tab. Outlook should not be configured to use Word as its email editor or to use Rich Text Format (RTF). Both of these methods result in emails which do not adhere to Internet standards.
  8. We recommend configuring Outlook Connector’s Send/Receive tab (located under the Account button in the Outlook Connector toolbar) to only check the Inbox folder for new items at each Outlook send/receive interval.
  9. Outlook Connector includes the option “Download Headers Only” under the Send/Receive tab of the Outlook Connector Client configuration screen. When this option is enabled, Outlook only downloads the information needed to show messages in the message list, and not the full content of each message. When you click on a message, the rest of the message is downloaded for viewing. Users may experience a slight delay in viewing messages in the preview pane when “Download Headers Only” is enabled because Outlook has to download the rest of the message when it is selected.
  10. We recommend configuring the Send/Receive schedule to check for new mail every 3 minutes.
  11. We recommend performing these housekeeping tasks regularly:
    1. Delete any email messages, calendar items, and contacts that are no longer needed.
    2. Empty the Deleted Items folder by right-clicking it and selecting Empty Folder.
    3. Delete unwanted items from the Sent Items folder.
    4. Move items out of the Inbox to other mail folders.
    5. Archive old messages. Mail server administrators can implement a server-wide archiving solution such as MailStore to help cut down on the amount of data stored in user mailboxes.

Following these guidelines will help ensure that Outlook Connector continues to run smoothly. For more information, please see our Outlook Connector how-to guides. As always, I’m available if you have questions!

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  

MailStore 10 – With Full Encryption, Automatic Updates, and More!

MailStore UpdateOur friends at MailStore have been hard at work to make their email archiving solution more secure while providing more flexible administrative features.  With the release of MailStore version 10, users and administrators benefit from the following improvements.

Keeping Archive Data Safe & Secure

Full Encryption of Database & Audit Logs

MailStore has always stored archived email in encrypted format, but now, they take encryption a step further by encrypting the internal databases and audit logs. Now, in addition to the messages themselves being encrypted, metadata such as message subjects, senders, and recipients are also encrypted, as well as the archive folder structure.

Restricted archive access for administrators

By default, MailStore administrators will no longer be able to browse, search, or export email of other MailStore users as long as the compliance setting “Archive Access” (formerly known as E-mail preview) is set to “Block Access.”

Extra Cloud Backup Protection

MailStore now allows you to use a specific recovery key to prevent archive data from being accessed from other systems by unauthorized users. This is useful in situations where cloud storage backup locations are used.

Making Life Easier for Administrators

Automatic Updates with Email Notifications

MailStore now includes an automatic-update feature that notifies the administrator when a new version is available. This helps to ensure that you can always benefit from the latest feature set.

Flexible Storage Location Options

Administrators now have more options when configuring archive stores. Each component of an archive (email content, search indexes, databases) can now have its own storage location.

Many Other Improvements

These are just the highlights of MailStore’s new features. To benefit from all of its new features and enhancements, download MailStore 10 today!

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •