PDF Print E-mail

spam.gifEmail Virus & SPAM Filtering

Your First Line of Defense

Virus

Virus Filtering

A generally accepted estimate is that about 99.8% of all computer virus infections come from e-mail. Our experience indicates that between one and two percent of all e-mail is infected.

The computer industry has developed two approaches to virus filtering: one at the PC level and one at the enterprise level.

PC-level protection requires that you install and maintain virus prevention software on every PC. The advantage of this solution is that it not only protects against e-mail infection but also infection from floppy disks, FTP files, etc. However, this approach can also be expensive and very difficult to maintain. The problem is keeping every PC updated. A user may opt to buy virus protection software but end up not keeping it up to date with the latest "signature files," which describe new viruses.

The second approach is to install an enterprise e-mail filter, which looks at all of the e-mail going to one or more e-mail servers. WVNET is currently running this type of virus filtering.

An enterprise e-mail filter has the advantage that it can be maintained at one location, and it protects against the source of approximately 99.8% of all viruses. The virus filtering software we use has been recognized as one of the best available. We get updated virus signatures for any new viruses every hour. There is nothing wrong with using both approaches (i.e., both desktop and enterprise filtering). In fact, many experts recommend that you do this for those administrative PCs over which you have greater control.

The enterprise e-mail filter provided by WVNET protects an institution/agency from external virus infection. We currently use three separate virus scanners to help ensure no infected mail messages get through. It does not protect against infection of one internal user by another internal user. To protect against this type of problem requires the redirecting of internal mail to WVNET for filtering. If you are interested in this additional level of protection, WVNET staff can discuss the pros and cons with you.

SPAM

SPAM Filtering

More than half of all e-mail coming to our e-mail server is unsolicited advertising called "SPAM." This flood of unwanted e-mail is not just annoying for the user -- it also places a heavy burden on e-mail servers, which handle all of the mail. By putting in place SPAM filters, WVNET has cut the traffic to our e-mail server in half.

Our general approach to filtering SPAM is outlined at www.spamhaus.org/effective_filtering.html.

Benefits

Benefits

Here are some good reasons to let WVNET filter your email.

  • Enjoy professional management of an enterprise-wide filtering solution for SPAM and viruses. This includes constantly updated virus signatures and dynamic access to multiple major SPAM-source databases -- all for one low budgeted cost and with no additional load on your staff. We can do some customization of the SPAM filter depending on your needs.

  • Save approximately half of your mail server's capacity by preventing SPAM from ever reaching your server. This avoids unnecessary e-mail server upgrades and reduces the size of mail systems backups.

  • Improve user productivity by reducing or eliminating the time spent every day separating the useful correspondence from the useless clutter.

  • Create a more wholesome educational environment through the reduction or elimination of salacious solicitations.

  • Close the source of as much as 99.8% of the viruses in your organization's computers. This reduces the load on your support services, improves user productivity, protects your intellectual property and administrative resources, and facilitates secure collaboration and information sharing within your campus communities.

Reliability

Reliability

WVNET uses a commercial virus scanning engine, which updates the virus signature tables every hour. This software runs on RedHat Linux on an IBM x-Series machines with dual CPUs and raid/mirrored disk drives. The hardware was chosen for its reliability; since it is important to have 24x7x365 availability.

WVNET tests all software upgrades on a separate test machine and, after testing, migrates to new software levels on our production servers in the early morning hours or on weekends. Downtime for upgrades is minimal and generally in the 15-30 minute range. WVNET also maintains a spare server readily available in the event of a serious hardware failure.

Pricing

Pricing

Our standard pricing for this service is $1500 base price per year and one dollar per account per-year. For sites with fewer than 200 accounts WVNET will charge $1,000 per year. For sites with more than 8,000 accounts, WVNET will negotiate a fair price depending on the number of messages per day, the size of the average message, and the number of e-mail accounts involved.

For more information, please contact Jay Justice at (304) 293-5192 x271 or send email to This e-mail address is being protected from spam bots, you need JavaScript enabled to view it .

Statistics

Statistics

These statistics show the content of e-mail arriving at WVNET for our customers. Notice that the majority of all e-mail is SPAM - unsolicited advertisements and scams. SPAM is a waste of time and resources, causing many problems for internet users and providers. WVNET uses several state-of-the-art scanning tools to detect and eliminate spam before it ever reaches a customer's mailbox.

A small percentage of e-mail contains viruses. It is important to understand that viruses spread mostly through e-mail, and that even one customer receiving an infected e-mail can transmit the virus to thousands of other internet users. WVNET uses up-to-date virus scanners to disinfect e-mail before our customers receive it.

WVNET E-mail Processing Statistics
Nov 21, 2009 - 2:44
Date Good Spam Virus Total
So Far Today 270,829 743,199 2,829 991,920
Nov 20 308,940 973,975 4,465 1,287,380
Nov 19 336,019 859,806 3,725 1,199,550
Nov 18 313,322 1,155,839 3,936 1,473,097
Nov 17 294,311 1,127,244 3,683 1,425,238
Nov 16 95,709 805,894 3,259 904,862
Month To Date 4,583,000 18,289,165 64,318 22,936,483
Year To Date 74,075,081 365,272,845 1,251,558 440,599,484
Last Year 124,869,316 2,375,296,760 522,474 2,500,688,550
                                                   
So Far TodayGood 24.8%Spam 74.9%Virus <1%

Nov 20Good 24.0%Spam 75.7%Virus <1%
Nov 19Good 28.0%Spam 71.7%Virus <1%
Nov 18Good 21.2%Spam 78.5%Virus <1%
Nov 17Good 20.6%Spam 79.1%Virus <1%
Nov 16Good 10.5%Spam 89.1%Virus <1%

Month to DateGood 20.0%Spam 79.7%Virus <1%

Year to DateGood 16.8%Spam 82.9%Virus <1%

Last YearGood 5.0%Spam 95.0%Virus <1%
   
Virus Counts
Virus
Name
So Far
Today
All Day
Yesterday
Phishing.Heuristics.Email.SpoofedDomain 01409
Sanesecurity.Jurlbl.8643 0583
Sanesecurity.Jurlbl.2884 0206
Sanesecurity.Junk.18748 0177
Sanesecurity.Junk.21209 0168
Sanesecurity.Jurlbl.9445 0154
Sanesecurity.Junk.17710 0128
Sanesecurity.Spam.5322 0117
Sanesecurity.Junk.20477 0116
Sanesecurity.Jurlbl.3411 099
Sanesecurity.Jurlbl.4938 067
Sanesecurity.Junk.17540 066
FilenameChecks 051
Sanesecurity.SpamImg.333 047
Sanesecurity.Scam4.1932 043
Sanesecurity.Junk.21123 041
Sanesecurity.Phishing.Cur.11209 034
Sanesecurity.Phishing.Cur.11810 032
Sanesecurity.Scam4.1702 029
winnow.malware.murl.malware.287291 026
Sanesecurity.Phishing.Fake.12159 023
Sanesecurity.Jurlbl.4569 023
Sanesecurity.Spam.9200 021
Sanesecurity.Scam4.1533 021
Sanesecurity.Junk.23810 018
Sanesecurity.Phishing.Fake.12350 017
Sanesecurity.Junk.16100 017
Sanesecurity.Jurlbl.7133 014
Sanesecurity.Scam4.801 013
Sanesecurity.Phishing.Cur.12466 013
Sanesecurity.Phishing.Cur.10908 012
Sanesecurity.Spam.52 012
Sanesecurity.Casino.7134 011
Sanesecurity.Jurlbl.3437 011
Sanesecurity.Jurlbl.7407 011
Sanesecurity.Junk.19990 011
Sanesecurity.Junk.7890 011
Sanesecurity.Job.9888 010
Sanesecurity.Casino.7036 010
Sanesecurity.SpamL.9599 010
Sanesecurity.Junk.23784 010
Sanesecurity.Junk.8613 09
Sanesecurity.Job.2964 09
Sanesecurity.Phishing.Cur.12793 09
Sanesecurity.Junk.13930 08
Sanesecurity.Junk.8744 08
Sanesecurity.Junk.20476 08
Sanesecurity.Phishing.Bank.2813 08
Sanesecurity.Phishing.Cur.773 08
Sanesecurity.Junk.21177 07
PasswdProtectedZip 07
Sanesecurity.Scam4.1282 07
Sanesecurity.ScamL.494 07
Sanesecurity.Junk.14005 06
Sanesecurity.Junk.9314 06
Sanesecurity.Spam.9379 06
Sanesecurity.Job.2872 06
Sanesecurity.Malware.7146 06
Sanesecurity.Jurlbl.9444 06
Sanesecurity.SpamImg.514 06
Sanesecurity.Hdr.9894 06
Sanesecurity.Junk.7949 06
Sanesecurity.Scam4.2793 06
Sanesecurity.Junk.20091 06
Sanesecurity.Junk.24026 05
Sanesecurity.Jurlbl.5732 05
Sanesecurity.Junk.8895 05
Sanesecurity.Spam.11131 05
Sanesecurity.Junk.18679 04
HTML/Bankish.NR 04
Sanesecurity.Scam4.1510 04
Sanesecurity.Junk.16623 04
Sanesecurity.Spam.10853 04
Sanesecurity.Junk.10262 04
Sanesecurity.Junk.12759 04
Sanesecurity.Phishing.Cur.11160 04
Sanesecurity.Phishing.Pay.6370 04
Sanesecurity.Junk.23246 04
Sanesecurity.Junk.8712 04
Sanesecurity.SpamImg.520 04
Sanesecurity.Phishing.Fake.10258 04
Sanesecurity.ScamL.524 04
Sanesecurity.Spam4.10182 04
Sanesecurity.Phishing.Fake.10225 04
W32.Sality.Q-1 04
Sanesecurity.Junk.10387 03
Sanesecurity.Junk.19201 03
Sanesecurity.ScamL.439 03
Sanesecurity.Junk.7911 03
Sanesecurity.Phishing.Cur.925 03
Sanesecurity.Scam4.1458 03
Sanesecurity.Junk.23929 03
Sanesecurity.Hdr.8234 03
Sanesecurity.Junk.12813 03
Sanesecurity.Junk.9002 03
Sanesecurity.Junk.10340 03
Sanesecurity.Junk.8808 03
Sanesecurity.Phishing.Fake.10475 03
Sanesecurity.Phishing.Cur.11082 03
Sanesecurity.Phishing.Cur.13004 03
Sanesecurity.Junk.10670 03
Sanesecurity.Phishing.Cur.13007 03
Sanesecurity.Phishing.Fake.9918 03
Sanesecurity.Junk.20950 03
Sanesecurity.Hdr.9893 03
Sanesecurity.Scam4.2495 03
Sanesecurity.Junk.7726 02
Sanesecurity.Junk.8912 02
Sanesecurity.Jurlbl.80 02
Sanesecurity.Phishing.Pay.6127 02
Sanesecurity.Jurlbl.29936 02
Sanesecurity.Junk.11991 02
Sanesecurity.Junk.15959 02
Sanesecurity.Phishing.Pay.6365 02
Sanesecurity.Junk.13348 02
Sanesecurity.Jurlbl.29473 02
Sanesecurity.Junk.8626 02
Sanesecurity.Junk.6729 02
Sanesecurity.Jurlbl.31103 02
Sanesecurity.Junk.13560 02
Suspect.DoubleExtension-zippwd-7 02
Sanesecurity.Jurlbl.31823 02
Sanesecurity.Scam4.1911 02
Sanesecurity.ScamL.587 02
Sanesecurity.Spam.4832 02
Sanesecurity.Junk.16610 02
Sanesecurity.Junk.22974 02
Sanesecurity.Scam4.1302 02
Sanesecurity.Spam.9738 02
Sanesecurity.Junk.17950 02
Sanesecurity.Jurlbl.31837 02
Sanesecurity.Scam4.1723 02
Sanesecurity.Scam4.1217 02
Sanesecurity.Spam4.9513 02
Sanesecurity.ScamL.716 02
Sanesecurity.Junk.20676 02
Sanesecurity.Junk.6750 02
Sanesecurity.Junk.16622 02
W32/Sality.AD 02
Sanesecurity.Junk.24090 02
Sanesecurity.Spam.9262 02
Sanesecurity.Junk.7551 02
Sanesecurity.Junk.16464 02
Sanesecurity.SpamL.8842 02
Sanesecurity.Scam4.1223 02
Sanesecurity.Malware.11523 02
Sanesecurity.Junk.16483 02
Email.Phishing.Bank-87 02
Sanesecurity.SpamL.9224 02
Sanesecurity.Scam4.1789 02
Sanesecurity.Job.2908 02
Sanesecurity.Phishing.Cur.162 02
Sanesecurity.SpamImg.521 02
Sanesecurity.SpamImg.501 02
Sanesecurity.Junk.20592 02
Sanesecurity.Jurlbl.2468 02
Sanesecurity.Junk.19401 02
Sanesecurity.Junk.11859 02
Sanesecurity.Spam4.9621 02
Sanesecurity.Scam4.1710 02
Sanesecurity.Junk.23786 02
Worm.Mydoom.M 02
Sanesecurity.Junk.9631 02
Sanesecurity.Junk.13135 02
Sanesecurity.Scam4.1728 02
Sanesecurity.Junk.10609 02
Sanesecurity.Junk.16485 02
Sanesecurity.Phishing.Fake.12185 01
Sanesecurity.Scam4.1001 01
Sanesecurity.Junk.23236 01
Sanesecurity.Junk.10081 01
Sanesecurity.Scam4.9410 01
Sanesecurity.Junk.14466 01
Sanesecurity.Junk.10395 01
Sanesecurity.Junk.21070 01
Sanesecurity.Junk.11517 01
Sanesecurity.Junk.9978 01
Sanesecurity.ScamL.717 01
Sanesecurity.Junk.18770 01
Sanesecurity.Junk.11453 01
Sanesecurity.Junk.23968 01
Sanesecurity.Scam4.1465 01
Sanesecurity.Spam.10010 01
Sanesecurity.Junk.24013 01
Sanesecurity.Junk.10922 01
Sanesecurity.Hdr.10558 01
Sanesecurity.Junk.16244 01
Sanesecurity.Junk.11436 01
Sanesecurity.Junk.22029 01
Sanesecurity.Scam4.1164 01
Sanesecurity.ScamL.3 01
Sanesecurity.Scam4.1377 01
Sanesecurity.Junk.13464 01
Sanesecurity.Junk.24096 01
Sanesecurity.Phishing.Cur.111002 01
Sanesecurity.Junk.22864 01
Sanesecurity.Junk.23932 01
Sanesecurity.Spam4.8889 01
Sanesecurity.Junk.10941 01
Sanesecurity.Junk.16113 01
Sanesecurity.Junk.17953 01
Sanesecurity.Spam.8927 01
Sanesecurity.Junk.11357 01
Sanesecurity.Junk.20567 01
Sanesecurity.Junk.18876 01
Sanesecurity.Jurlbl.31931 01
Sanesecurity.Junk.13468 01
Sanesecurity.Scam4.1472 01
Sanesecurity.Phishing.Fake.9921 01
Sanesecurity.Scam4.1913 01
Sanesecurity.Junk.13622 01
Sanesecurity.Junk.16620 01
Sanesecurity.ScamL.80 01
Sanesecurity.Junk.24093 01
Sanesecurity.Scam4.1373 01
Sanesecurity.Job.2874 01
Sanesecurity.Spam.10573 01
Sanesecurity.Junk.19627 01
Sanesecurity.Scam4.2629 01
Sanesecurity.Junk.7843 01
Sanesecurity.Phishing.GiftCard.6687 01
Sanesecurity.Scam4.1602 01
Sanesecurity.Spam.10011 01
Sanesecurity.Junk.16724 01
Sanesecurity.Junk.14594 01
Sanesecurity.Scam4.1700 01
Sanesecurity.Job.2939 01
Sanesecurity.Scam4.1587 01
Sanesecurity.Junk.14465 01
W32/Mydoom.O@mm 01
Sanesecurity.Junk.1239 01
Sanesecurity.Scam4.1727 01
Sanesecurity.Phishing.Cur.438 01
Sanesecurity.Junk.23969 01
Sanesecurity.Junk.11479 01
Sanesecurity.ScamL.371 01
Sanesecurity.Junk.20114 01
Sanesecurity.Junk.20634 01
W32/Trojan3.BNH 01
Sanesecurity.Scam4.818 01
Sanesecurity.Junk.13338 01
Sanesecurity.Rogue.843 01
Sanesecurity.Junk.24099 01
Sanesecurity.Scam4.1340 01
Sanesecurity.Scam4.1717 01
Sanesecurity.Junk.13846 01
Sanesecurity.Junk.21088 01
Sanesecurity.Junk.11969 01
CVE-2006-1309 01
Sanesecurity.Junk.17330 01
Sanesecurity.ScamL.632 01
Sanesecurity.Junk.12798 01
Sanesecurity.Scam4.2490 01
Sanesecurity.Spam.11100 01
Sanesecurity.Job.9563 01
Sanesecurity.ScamL.577 01
Sanesecurity.Scam4.1863 01
Sanesecurity.Casino.9286 01
Sanesecurity.Spam.4730 01
Sanesecurity.Junk.8015 01
Sanesecurity.Junk.22963 01
Sanesecurity.Jurlbl.9440 01