What you are looking for is Maia MailGuard. It's basically open-source software that manages SpamAssassin and that integrates with the virus and spam filtering engine Amavisd-new. It stores its settings on a mysql database and stores all spam there, too. Each user can have its own "spam area" that can be accessed thru apache (made in PHP). It works in four stages: Incoming MTA, filtering, storing in SQL, outgoing MTA. Each can run on separate machines, but all working together. www.maiamailguard.com Tiago de Aviz SoftSell - Curitiba (41) 340-2363 www.softsell.com.br Esta mensagem, incluindo seus anexos, tem caráter confidencial e seu conteúdo é restrito ao destinatário da mensagem. Caso você tenha recebido esta mensagem por engano, queira por favor retorná-la ao destinatário e apagá-la de seus arquivos. Qualquer uso não autorizado, replicação ou disseminação desta mensagem ou parte dela é expressamente proibido. A SoftSell não é responsável pelo conteúdo ou a veracidade desta informação. -----Mensagem original----- De: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx] Enviada em: quarta-feira, 22 de dezembro de 2004 15:53 Para: [ExchangeList] Assunto: [exchangelist] Re: Exchange 2003 Front-end design http://www.MSExchange.org/ Not really a valid solution... During the day the gateways will update their bayesian filters separately. I need to be able to merge those db's and GFI does not offer that feature. They are supposedly working on allowing a SQL db that can be shared, but even that solution will not work for my remote SMTP gateways that have GFI installed... No real solution at this point... Chris -----Original Message----- From: Depp, Dennis M. [mailto:deppdm@xxxxxxxx] Sent: Wednesday, December 22, 2004 10:43 AM To: [ExchangeList] Subject: [exchangelist] Re: Exchange 2003 Front-end design http://www.MSExchange.org/ Is it possible to replicate the databases to the remaining servers? IE make all the changes on Server1 and then have server2 periodically replicate the database to server2. Dennis -----Original Message----- From: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx] Sent: Tuesday, December 21, 2004 9:50 AM To: [ExchangeList] Subject: [exchangelist] Re: Exchange 2003 Front-end design http://www.MSExchange.org/ Dennis, Thanks for the information. I have set this up in a test environment and all seems to be working out... I am using Dell 2650's (dual processors) with 1 gb ram each. The only challenge that I have at this point is with GFI Mail Essentials and Mail Security. This is a software SPAM/Virus solution and there is no way for the 3 machines to reference a single database for block lists, white lists, etc... In other words, the 3 machines will all have different block lists, bayesian filters, etc. This is not good. To over come this I have decided that the better design for my org is to have 2 Front-end NLB servers running Secure OWA and RPC over HTTPS. Then also have two SMTP Gateway FE servers with different MX record values and attempt to keep these machines as 'similar' as possible with their GFI block lists. Thanks again for the info. Chris -----Original Message----- From: Dennis Depp [mailto:dennis.depp@xxxxxxxxx] Sent: Tuesday, December 21, 2004 7:55 AM To: [ExchangeList] Subject: [exchangelist] Re: Exchange 2003 Front-end design http://www.MSExchange.org/ Sorry for the late reply, but I didn't see anyone really answer your questions. 1. You don't say what type of servers you are running. I have two front end servers. These are dual processor machines with 1GB ram. I have no problem with load on these servers. I would estimate a similar load to what you describe. 2. I have not used NLB on the front end servers, but I am considering it. You can have NLB temporarily turn off for new connections and then wait for existing connections to finish. This allows for a more seamless patching environment than our existing solution. 3. Again I am not running NLB with Exchange, but I have no SSL issues on other NLB servers I am running. 4. Yes NLB is smart enough to forward all your requests to the same front end server. I believe this is configurable, but I have not done any tinkering with it. Dennis On Thu, 16 Dec 2004 23:53:11 -0500, Chris Wall <Chris.Wall@xxxxxxxxxxxxxxxxxxx> wrote: > http://www.MSExchange.org/ > > > Currently trying to decide on the best Front-end deployment of Exchange 2003 > for our organization... > > > > I am leaning towards using windows 2003 server NLB (network load balancing) > on 3 servers in our DMZ. These three servers will all perform SMTP Gateway, > OWA with SSL, RPC over HTTPS duties and each will have GFI Mail Security and > Mail Essentials running on them... These servers will not be clustered - at > least they will not share an external NAS or SAN device for storage. They > will rely on their own disk stores individually. > > > > A little info about our domain.. > > - I am estimating no more than 50 to 75 OWA users at any time. RPC over > HTTPS will be used sporatically at best. We receive on average 4 million > e-mails per month, 85% of which is marked as SPAM. I expect this number to > drop drastically when GFI is installed on the Exchange 2003 FE servers and > can reject emails destined for non-existent e-mail addresses on our domain. > > > > > > My Questions/concerns are: > > > Is this too much load on these servers? (SSL encryption for OWA and RPC, > SPAM/Viral filtering, as well as SMTP delivery) > > 2. Has anyone implemented NLB on their front end servers? If so, > can you provide any Pros/Cons? > Will I have SSL Certificate issues with NLB on FE servers? > How are the OWA and RPC sessions handled? In other words, if a user connects > to OWA in the NLB environment, will Windows NLB be smart enough to forward > all their exchange requests back to the original FE server so that the > session is not dropped or cancelled? > > > > Microsoft recommends the use of NLB on FE servers, but I have yet to find > any real detail into possible issues or deployment recommendations. After > this, I hope to write a 'Help' document to be posted on MSExchange.org as > there isn't one there at this time. > > > > Thanks for your expertise. > > > Regards, > > > > Chris Wall > > Sr. Exchange Administrator > > MCSE, MCSA > > T - 919.460.3236 > > F - 919.468.4889 > > > > Global Knowledge Network > > LEARNING. To Make a Difference > > http://www.globalknowledge.com > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this MSEXchange.org Discussion List as: > dennis.depp@xxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: Chris.Wall@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: deppdm@xxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: Chris.Wall@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx