Exchange & Outlook UPDATE, Exchange Edition--The Legal Implications of RBLs--November 16, 2006

-------| Exchange & Outlook UPDATE |-------

IN THIS ISSUE
*Commentary: The Legal Implications of RBLs
*Virtual Event: SharePoint Pro Online—LIVE!
*Exchanging Ideas: Better OWA Attachment Security
*New and Improved: Sherpa Software Increases Efficiency While Archiving Email

++++++++++++++++++++++++++++++++++++++++++++++++++

OUR SPONSORS WHO HELP SUPPORT FREE DELIVERY OF THIS NEWSLETTER:

Demo: True Exchange Integration with Esker Fax
http://www.esker.com/EskerFax4Demo

Total Cost of Ownership of an Email Archive
http://www.windowsitpro.com/go/whitepapers/fortiva/emailarchive/?code=EXCMid1116

Email Is Down: Now You're Out of Compliance!
http://www.windowsitpro.com/go/whitepapers/messageone/continuity/?code=EXCHot1116

++++++++++++++++++++++++++++++++++++++++++++++++++

Sponsor: Esker Software

Demo: True Exchange Integration with Esker Fax
If your fax server doesn't communicate directly with Exchange, you're missing out on functionality that can make your job easier. Esker Fax(TM) actually integrates with Exchange for direct communication between fax and mail servers. This level of integration provides advantages that are simply not available with other fax servers. Esker Fax offers single-point administration within Active Directory for easy user management, centralized deployment of enterprise-wide desktop fax in one simple step, installation on any server running Exchange Server Manager, and immediate feedback on individual fax processing and sending status. Fax on Demand service provides a secure backup option for failover and overflow, and helps to reduce fax infrastructure costs. Click to request a recorded demonstration of Esker Fax.
http://www.esker.com/EskerFax4Demo

++++++++++++++++++++++++++++++++++++++++++++++++++

***COMMENTARY: The Legal Implications of RBLs
by Paul Robichaux, Exchange Editor, [email protected]

Sometimes it's hard to find a good topic to write about for the UPDATE; other times, something just jumps out at me and I almost can't help writing about it. This week's column is the result of the latter: A respected legal scholar, Jonathan I. Ezor, has written an interesting paper that covers the legal implications of Realtime Blackhole Lists (RBLs). The paper, "Busting Blocks: Appropriate Legal Remedies for Wrongful Inclusion in Spam Filters Under U.S. Law," (http://papers.ssrn.com/sol3/papers.cfm?abstract_id=944551) is interesting to Exchange administrators for several reasons, not least that Professor Ezor "argues for a higher standard of care among block list vendors"—something that an administrator for any mistakenly blocked business would no doubt welcome.

The paper begins by defining spam and presenting a brief history; it's probably safe to say that most UPDATE readers can skip that part. Ezor goes on to discuss the Internet tradition of finding self-policing technical solutions to behavioral problems whenever possible, and he places RBLs in this tradition. However, as with many other self-regulated environments, there's no guarantee that all the involved parties will either follow the regulations or act reasonably in the context of the environment. Thus we've seen a rise in litigation involving RBLs, including several companies who have sued claiming that they were wrongly added to a list. (My own ISP, Buckeye Express, has filed such a suit, but it's still pending.)

Ezor explains that entities wrongly added to an RBL have sued for defamation, "intentional interference with prospective business relationships" (which is just about what it sounds like), restraint of trade, and a variety of other grievances. There's no doubt that when your server's IP address is added to a blacklist, you'll have trouble exchanging legitimate email with other organizations; the only real questions are how fast you'll figure out what the problem is and how fast you can fix it. Filing suit is certainly an extreme measure, but some RBL providers take a surprisingly casual approach to fixing mistakes. Clearly the good professor is on to something when he says, "For the sender, though, the consequences \[of a mistake\] can be severe, and without the ability to use the courts to force a change, the sender may have little recourse."

Instead of spamming the courts with litigation, Ezor proposes an alternative solution:

RBL vendors should use objective standards to decide who they add to their lists.
Senders who complain should be automatically delisted unless there's proof that they're spammers.
RBLs should list the IP address of only the offending sender, not another party who might benefit from the message (such as the advertiser whose product is being touted).
Providers should "be held to professional standards of conduct, including objectivity, reasonable care, and (to the extent their activities cause harm) accountability."

This is a pretty strong set of suggestions, especially the last one. The Internet, and the IT world in general, has a long history of trouble with the idea that "professional standards of conduct" should apply. It doesn't seem likely that RBL providers (many of which are operated by volunteers) who have historically refused to apply these standards will suddenly start doing so unless someone makes them, and in that case the cure might be worse than the disease.

However, it's an interesting argument, particularly in light of the complaints I've been hearing from administrators who have been incorrectly added to blacklists. What do you think? Would you be willing to pay a fee to subscribe to an RBL service if you could find one that followed these recommendations? Drop me a note and let me know.

One last reminder: This is the final week to submit proposals for the spring 2007 Exchange Connections show, which will be held April 1–4 at the Hyatt Regency Grand Cypress in Orlando, Florida. If you're interested in speaking or would like to see particular sessions presented, drop me a note at [email protected]. (Note that this address is different from my regular email address.)

++++++++++++++++++++++++++++++++++++++++++++++++++

Sponsor: Fortiva

Total Cost of Ownership of an Email Archive

Why You Should Consider a Hosted Messaging Archiving Solution?
What is the true cost of an in-house email archiving solution and how does it compare to the cost of an outsourced solution? Find out from independent researchers what the TCO of both solutions really is, and how the management of an in-house solution can strain IT budgets and staff. Download your copy of this whitepaper today!
http://www.windowsitpro.com/go/whitepapers/fortiva/emailarchive/?code=EXCMid1116

++++++++++++++++++++++++++++++++++++++++++++++++++

***VIRTUAL EVENT

SharePoint Pro Online—LIVE! will be a premier virtual event for developers and administrators of SharePoint products and technologies. Brought to you by MSD2D and the Windows IT Media Community, this event will demonstrate, showcase, and exhibit the premier companies in the SharePoint market. The conference will bring industry experts to the desktops of attendees, educating them on various SharePoint topics.

++++++++++++++++++++++++++++++++++++++++++++++++++

***EXCHANGING IDEAS

Focus: Better OWA Attachment Security

Remote users love OWA. You'll love these tips that limit the risks.
OWA is a handy tool for remote users, but its attachment handling leaves networks vulnerable to malicious code and intruders. Here are some tips to reduce the risks.
http://www.windowsitpro.com/Article/ArticleID/93000/93000.html

------
Have a question? Got answers? Join your peers in the Exchange discussion forums:
http://forums.windowsitpro.com/web/forum/categories.aspx?catid=40&entercat=y
Current Threads:
Estimating message volume
Change data fields in PST
Backing Up Exchange: What to Do?

------
Don't forget to sound off in our Instant Poll. This month's question is "Which topic will be most important to you in 2007?"
http://www.windowsitpro.com/MicrosoftExchangeOutlook/Index.cfm

~~~~ Hot Spot: ~~~~

Email is Down: Now You're Out of Compliance!

An Executive Guide to Avoiding the Unexpected and Harmful Effects of Email Outages
When your email systems go down, do your employees stop communicating? Of course not—they find alternate methods—which may not be compliant with your messaging regulations. Download this free Executive Guide to discover the impact of email outages on compliance and provides methods for establishing continuity in your corporate messaging environment.
http://www.windowsitpro.com/go/whitepapers/messageone/continuity/?code=EXCHot1116

++++++++++++++++++++++++++++++++++++++++++++++++++

***NEW AND IMPROVED
by Blake Eno, [email protected]

Sherpa Software Increases Efficiency While Archiving Email
Sherpa Software announced updates to its email archive solution, Archive Attender for Microsoft Exchange, to reduce the time and increase efficiency while using this solution. Archive Attender 3.0 introduces a new, simplified architecture that, according to Sherpa Software, can be installed and up and running in less than 15 minutes. This is due to the product's limited reliance on Microsoft components and its ability to monitor and configure settings within the OS. Additionally, Archive Attender requires no additional database or hardware requirements. The software can process tasks on multiple mailboxes simultaneously and can query Active Directory (AD) to target your archive policies. For more information, contact Sherpa Software at 412-206-0005 or 800-255-5155.
http://www.sherpasoftware.com

------
Wanted: your reviews of products you've tested and used in production. Share your experiences and ratings of products to "[email protected]" and get a Best Buy gift certificate.

++++++++++++++++++++++++++++++++++++++++++++++++++

***EVENTS AND RESOURCES

These Windows-related events, papers, and resources will help you keep your knowledge and skills up to date and help you deploy, secure, and maintain the latest Exchange- and Windows-related technologies. For more Exchange related resources, visit
http://www.windowsitpro.com/go/exchangeresources

The Event log (for Windows systems) and Syslog (for UNIX/Linux systems) contain a wealth of information. In this free Web seminar, you'll learn about the processes, challenges, and benefits of consolidating events on a centralized server and we'll identify the 50 critical events that should be monitored in your enterprise. Live Web seminar: Wednesday, December 13
http://www.windowsitpro.com/go/seminars/prism/eventlogdec/?code=1115emailannc

When disaster strikes, do you feel like you're digging for buried treasure to recover your data? Test your disaster recovery skills, and you could win! Each week we'll give away a USB flash drive to one lucky treasure hunter. You'll also be entered to win the full treasure chest, including Bose headphones! Test your skills now!
http://popquiz.windowsitpro.com/symantectreasurehunt/default.aspx

Learn the basics of Linux and Windows interoperability, and find out more about how to use Linux and open-source tools such as Samba and pam_ldap with Microsoft tools such as IdMU, MSNFS, and SUA. Register today for this free seminar with industry expert Dustin Puryear, and get access to three additional seminars discussing virtualization, single sign-on, and database replication. Find out more today! Live event: Thursday, December 14
http://events.unisfair.com/rt/techx?code=1115emailannc

Incorporate Virtual Machines into Your Disaster Recovery Plan
Join us for a free Web seminar to learn how incorporating virtual machines into your disaster recovery plan can reduce your TCO by 50 percent or more, reduce hardware cost, and simplify management. Find out more from industry leaders at VMware and CA XOsoft. Available now!
http://www.windowsitpro.com/go/seminars/xosoft/virtualmachines/?partnerref=1115emailannc
BONUS: Register for any Web seminar—live or on-demand—during the month of November, and you could win a PS3! View a full list of eligible seminars at
http://www.windowsitpro.com/events/Index.cfm?Filter=webSeminars&fID=1

You know you need to manage your email data, but how to do it? What steps should you take? What additional measures should you enact? What shouldn't you do? Get answers to these questions and get control of your vital messaging data. Download the free eBook today!
http://www.windowsitpro.com/go/ebooks/ilumin/discovery/?code=1115emailannc

FEATURED WHITE PAPER

===============

Disaster recovery isn't just a theory for most businesses—it's a harsh business reality. Improve your own disaster recovery efforts today and learn from real-life disaster survivors. Make sure that your plan is ready before a disaster strikes—download this free white paper today!
http://www.windowsitpro.com/go/whitepaper/neverfail/disaster/?code=1115featwp

==== ANNOUNCEMENTS

=====================

Save $40 off Windows IT Pro
Subscribe to Windows IT Pro today and SAVE $40! Along with your 12 issues, you'll get FREE access to the entire Windows IT Pro online article archive, which houses more than 9,000 helpful IT articles. This offer expires on November 30, 2006, so order now:
https://store.pentontech.com/index.cfm?s=1&promocode=eu206buw

Make Your Mark on the IT Community!
Nominate yourself or a peer to become IT Pro of the Month. This is your chance to get the recognition you deserve and be acknowledged in the IT community. Winners will receive over $600 in IT resources and be featured in Windows IT Pro and the TechNet Flash email newsletter. Entering is easy—we're accepting December nominations now for a limited time! Submit your nomination today:
http://www.windowsitpro.com/go/itpromonth

Contact Us

About the newsletter -- [email protected]
About technical questions -- http://www.windowsitpro.com/forums
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]

===============

This email newsletter is brought to you by Exchange & Outlook Administrator, the leading publication for IT professionals managing, securing, optimizing, and migrating Exchange and Outlook. Subscribe today!
https://store.pentontech.com/index.cfm?s=1&promocode=eu205xeb

View the Windows IT Pro Privacy policy at
http://www.windowsitpro.com/AboutUs/Index.cfm?action=privacy

Windows IT Pro a division of Penton Media Inc.
221 East 29th Street, Loveland, CO 80538,
Attention: Customer Service Department

Comments

Plain text