[AusNOG] Fw: important

[Rhys Hanrahan]

Hi Noel,

Personally, I agree with your opinion, and typically have stayed away from these solutions over the years for exactly this reason. However, over the last few months things seem to have worsened to the point where we need to try something different.

We've been running a typical postfix+rbls+spamassassin+clamav+lots of other bits for about the last 5 years, with me running the same setup personally, prior to that. And over the years, aside from some performance tweaks to get more throughput on Amavis, it's done fine. There's always been stuff it's missed, but like people have said, there's no silver bullet.

The problem is that the amount of stuff it misses seems to miss has gone up by a fair amount for us in recent times - not just with the crypto stuff, but with general junk that comes through.

I'm not going to extend this thread to "how do I fix our setup", because that's way outside the scope of the list, but I'll just say that I've already looked at improving the config in several ways and I feel like I've taken the setup as far as I can take it in terms of tweaks to reasonably improve its accuracy.

I know they're probably running the same or similar setup under the hood of any appliance, but the thing is, if they're going to provide me 24x7x365 signature updates that they manage, which can stay on top of outbreaks, then to me that's worth paying for.

Hopefully I manage to find something that doesn't end up falling over. :-) 

Rhys.

-----Original Message-----
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Noel Butler
Sent: Friday, 2 October 2015 10:07 AM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Fw: important

nearly missed this, found it in Junk because you replied direct, please reply to list only

On 01/10/2015 17:10, Brad Peczka wrote:
> Google will also show me examples of the aliens that landed at 
> Roswell, if I look hard enough. Doesn't mean it's real! :-)
> 

That maybe so, but the nightmares of ironport are well realised by those with a clue, including those that run networks large enough to make telstra look like a ma 'n pa part time vISP


> Ironport ESAs are a solid product, as evidenced through their use in 
> Australia by iiNet, Micron21, and many others in both the ISP and

and I (and assume others) recall a numnber of problems with mail and iinet in recent times because of ironport

Like I said YMMV, but most are shying away from these things, well, those that care do :)

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog