nsj
News
New features
Over the next week or so we'll be introducing three new features to no.Spam.java:
DomainKeys support, User Administration and Clustering
. Today we'd like to announce support for Domain Keys and explain a little bit how it can help you stem the flow of unwanted mail.
What is DomainKeys?
DomainKeys is a sender authentication proposal from Yahoo!. Like SPF (which is already available in nsj), DomainKeys provides a way to validate that a message was sent by the system that it claims to be from. In addition, DomainKeys can detect if a message has been tampered with along the way.
How does it work?
DomainKeys requires that the sending server digitally sign the message and attach a special header field before sending. The receiving server agent (nsj in this case) uses the header information to validate the digital signature.
Who is already using DomainKeys?
A number of large internet providers are already testing DomainKeys (Yahoo and Gmail for example). A growing number of corporations are adding DomainKeys support to their public DNS information.
How does it help me?
DomainKeys lets you guarantee that a message was sent by the domain claiming to have sent it. Unlike SPF, DomainKeys doesn't need to know the IP address of the server that sent the message to your MTA and therefore can be used 'downstream' from your receiving MTA with no problems. SPF and DomainKeys compliment each other and using both it a great way to add confidence to your inbound mail flow.
Enabling DomainKeys support in nsj.
To use DomainKeys in nsj you'll need build 832. Download the latest jar file from
http://drcc.dyndns.biz/downloads/nsj/nsj.jar
to update if you need to. Then just add the following lines to your nsj.ini file:
filter=domainKeys,score-10,tagSubject=<DKOK>;ifResult=PASS
filter=domainKeys,score=30,tagSubject=<DK!OK>;ifResult=FAIL
With these settings, nsj will tag the subject and also adjust the message score so that the DomainKeys status effects the message's chances of being declared Spam. Only strict passes and fails are checked for.
What else is coming soon?
As mentioned at the start, User Administration and Clustering are coming up soon. User Administration provides users the ability to directly administer their personal allow and deny lists (blacklists and whitelists) using a browser. Each user also gets to control their own 'personal spam level' which they can adjust to be more or less picky about what get's classified as Spam.
Clustering allows you to link multiple nsj nodes together into a single virtual spam fighting engine. Nodes can be close to each other or very far apart, clustering keeps all the configuration information, blacklists and whitelists synchronized.
Just ask us if you need any additional information on these new nsj features or how to use them. DRCC can help you to implement DomainKeys for your domain if you should want to.
lotus notes domino notes.ini reference news i.scan.domino scan domino no.spam.domino no spam domino darren crocker www.drcc.com drcc.com ibm groupware webmail inigen inidiff nabdiff nab message console services consulting portable pocket pc ipaq p800 pda security drc consulting
spam@drcc.dyndns.biz
rss news feed