GbJade Canada
ReSieve, why?
Benefits of having RSF are enormous.
- RSF is a middle man email security gateway in which you add, remove,
modify rules and all users are configured simultaneously.
- Huge time saver. No more walking from workstation to workstation to
perform these actions.
- Users cannot modify the rules and/or filters that are in action.
- Since this module is remotely controlled, these tasks can be done from
anywhere without leaving your desk.
- Eliminates the user temptations of opening attached files. (most of the
time containing viruses+)
- Users cannot click on link which leads to malicious web sites.
- Reduces the training time, if not eliminates educational time on what
not to do with email. ie: click links, open files.
- Users are warned if something unusual is detected. (a warning text is
added at the top of the email.)
- Classifies emails to the specified folder of your choice.
- Gain allot of time by not going through/read unwanted emails.
- Takes care of ransomware, phishing, viruses.
We have the same email problem as you do. We receive allot of unwanted
emails. Allot are totally fraudulent and/or misleading.
The quantity of spam
that we receive is overwhelming. With this volume of spam, we cannot afford to
not use RSF.
The following is an example of an email that we received. (the header only)
Here is the analysis. Colors are added to easy the read and find process.
Classified as spam by RSF
To: and From: are the same, John Britto <John.Britt@gac.com>
This cannot be.
abnormal header boundary syntax, --===============0736291834==
abnormal body boundary syntax,
--============== 58965882==
Return-Path: and Reply-To:, Does not have the same
address. This may as well be a good
email and can be fraudulent too. Beware.
Lastly : It has
this phrase in it. "You will not see this in a MIME-aware mail reader."
Beware.
Note: a MIME-aware mail reader may detect the
fraud.
Result : RSF has written a warning text at the top of the email that reads
like this.
Warning
Spoofing detected.
>>>>> Beware <<<<<
Return-Path: <John.Britt@gac.com>
Received: from client61.ewebguru.net (client61.ewebguru.net [96.9.241.234] (may
be forged))
by mail.GbJade.com (8.14.4/8.14.4) with ESMTP id xBV8VALN019696
for <george@gbjade.com>; Tue, 31 Dec 2019 03:31:11 -0500
Message-Id:
<201912310831.xBV8VALN019696@mail.GbJade.com>
Received: from [172.96.14.164]
(unknown [172.96.14.164])
by client61.ewebguru.net (Postfix) with ESMTPA id
9EE6E46417BB;
Tue, 31 Dec 2019 01:21:36 -0500 (EST)
Content-Type:
multipart/mixed; boundary="===============0736291834=="
MIME-Version: 1.0
Subject: [spam] Seafreight Enquiry to Dubai / Dijilah
To: John Britto <John.Britt@gac.com>
From: "John Britto" <John.Britt@gac.com>
Date: Mon, 30 Dec 2019 22:19:20 -0800
Reply-To:
johnybmt@gmail.com
X-Text-Classification:
spam
--===============0736291834==
You will not see this in a MIME-aware mail reader.
--============== 36291834=
Content-Type: multipart/alternative;
boundary="============== 58965882=="
MIME-Version: 1.0
--============== 58965882=
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: inline
Warning
Spoofing detected.
>>>>> Beware <<<<<
The body contant follows here having this boundary
--============== 58965882==
|
