Getting the best out of Surgemail's SPAM features
Users of Surgemail mail server have access to a wide range of tools
designed to identify, restrict and eliminate unsolicited email messages
which are generally referred to as SPAM. In this document, we will
examine three anti-spam features, and how to configure Surgemail to
effectively take advantage of them.
- SmiteSPAM (Spam detection)
- Friends (White list)
- Centipaid (Email postage)
SmiteSpam
Surgemail includes advanced features such as SmiteSpam. SmiteSpam is
a spam detection system which marks messages with special headers to
inform users that it thinks an email message is spam. Most email clients
can be setup to filter on one or more of these headers and filter away
spam.
SmiteSpam uses a combination of filter-rules and fuzzy matching to
correctly identify over 98% of spam. The spam messages are marked with a
header so individual users then choose their own 'level' of spam
tolerance. Typically the system admin bounces 'definite' spam and allows
users to sort through 'dubious' spam after their mail client has put it
into a 'suspect' folder.
Friends
The friends only system allows users to opt to receive messages only
from friends. Non friends are automatically questioned to determine if
they are human. All mail from non friends is held pending on the server
until the user decided what to do with it. Status reports are sent to
the user on a regular basis to provide information on the Friends system
and any mail pending delivery
Centipaid
Centipaid enables surgemail users to leverage the power of SmiteSpam
and friends to maintain a spam free mailbox. This is done by allowing
users to set email postage rates on incoming messages. This feature is
equivalent to today's airmail configuration where sender pays to insure
that his/her message arrives to the recipient. Centipaid supports email
postage rates starting as low as $0.001 USD.
|
Surgemail Features and Highlights
SurgeMail is the fastest,
most robust and secure, full-featured email server on the market today
supporting all the protocols and standards. SurgeMail is an advanced
secure easy to manage and install high performance email server. It
supports any number of users or domains, virus scanning, spam filtering,
email postage, integrated webmail access, integrated WAP support, and
fast browser based administration tools. And all relevant RFC protocols
POP3, SMTP, IMAP4, LDAP, HTTP, TLS/SSL.
- Integrated mail server and web based email Spam
and virus free email
- Integrated email postage - Centipaid
- Web based administration (user, domain and
server)
- Unique Mirror system
- Full SSL secure support for all protocols
- Using surgemail as a firewall for an existing
mail server
- Interface to existing user databases (OBDC,
MySQLl, LDAP, etc or use built in database)
- Scales to any number of users and domains
- Runs on platform of choice (Windows, most Unix
versions)
- Installs in minutes and unparalleled after
sales service
- Cellphone SMS/Text messages via SMSGate (FREE)
- Free 5 user license!
Find out more information about Surgemail at
http://www.surgemail.com
|
Understanding the challenge
Before we explain how to configure Centipaid with Surgemail, it is
important to describe why it is important to do so, and what are the
challenges.
The use of Spam detection software to stop spam is not fool proof. Mail
messages are designed by spammers to fool the best spam detection software,
letting in spam messages. On the other hand the same software may falsely
identify email messages as spam, generating false positives. False
positives can result in the loss of important mail.
NetWin and Centipaid worked together to close the gap by allowing users
to integrate the spam and friends features with email postage support. The
addition of Centipaid email postage feature enables users to request email
postage on received email, in combination with spam scoring and friends
list.
Surgemail's email postage support enables recpients to shift costs
associated with email delivery to the sender. This is done by requesting
payment to be made using Centipaid's Digital Stored Value Cards (DSVC).
Centipaid issues several DSVC cards including and not limited to CENTIPIX,
YaPago, and KidSafePay brands.
Configuring Surgemail
Surgemail can be configured with email postage support (Centipaid) to
work with the following configurations:
- SmiteSpam (Spam detection) and Email postage
(Centipaid)
- Friends (Whitelist) and Email postage (Centipaid)
- Other customized combination of all the features available.
How to configure surgemail with Centipaid (Administrator steps)
- Log into the admin page of surgemail to access the system
configuration.
This is usually https://localhost:7025/

- Click on Global to access global settings, or use the search to
find g_centipaid

- Set up CentiPaid address and port by entering the receipt
server and port number assigned to you by Centipaid in this format:
pay001.centipaid.com:2021
Advanced Notes: This is g_centipaid variable and it is set for all
users of the surgemail. It is assumed that all merchant accounts are
using this receipt server and port. Default is pay001.centipaid.com:2021
- Surgemail has several domain level variables which are found in the
main setting for each domain. These settings tell surgemail what options
the individual users can change for themselves. To access a specific
domain, click on Domains from the left panel, then select the
desired domain to configure.

- Proceed to set the Centipaid rules. Click on Edit Rules.
These rules define the default Centipaid configuration for a given domain
name. This includes information such as the account number to which email
postage should be deposited to, the email postage amount, and other
information the administrator sees fit. These values can be overridden by
individual users if they are permitted by the user_centipaid
settings (see User Centipaid configuration options)
Where
-
Match To
Wildcard. If accounts match this wildcard, they will have the following
settings.
-
Account
Centipaid merchant account number.
-
Password
Centipaid authentication server password.
-
HTTP(S) link
Link to page that receives payment.
-
Language
Language to display payment page in.
-
Amount Amount to
charge per email. (0.001 >= amount <= $10) in USD
-
Enabled Whether
Centipaid is enabled for matching users by default.
-
Friends Whether
message from friends are charged.
-
SmiteCRC Level at which messages are charged. (0
means all messages)

- Proceed to configure the User CentiPaid configuration options
by entering the names of the options you allow users to change on their
own. Typically you want to allow users to change the email postage
amount, whether to use it with friends, enable/disable,
and smite score, hence you enter:
amount, enabled, friends, smite
When set, the user will be able to change the following options:
| acct |
The merchant account number issued by Centipaid |
| pass |
The merchant receipt server password, which is
provided when you sign up for Centipaid |
| https |
The link to the page that accepts payment from the
user. i.e. https://pay.centipaid.com/ |
| lang |
The language of the payment shown when payment URL is
clicked, i.e. en (English) |
| amount |
The email postage amount in USD, i.e. 0.25 |
| enabled |
If set then CentiPaid is enabled for all matching
accounts, otherwise the user may enabled it (depending on value of
user_centipaid) |
| friends |
If TRUE then senders marked as Friends will be
charged, otherwise they will be allowed. |
| smite |
SmiteCRC level, if an email receives more than this it
is charged. A value of 0 charges all emails |
Advanced Notes: This is user_centipaid setting.
- That's it. Surgemail is ready to accept email messages with postage
depending on your configuration.
If users are allowed to change settings, then they can custom tailor the
email postage feature to fit their needs.
Advanced Notes: The above steps can be quickly added to Surgemail
by editing /etc/surgemail.ini and adding the following commands:
global_settings
g_centipaid
"pay001.centipaid.com:2021"
vdomain address="" name="foo.com"
centipaid match="*" acct="AEF001"
pass="adonis" https="https://pay.centipaid.com/index.php"
lang="en" amount="0.001" enabled="FALSE" friends="FALSE" smite="0"
user_centipaid "acct,pass,https,lang,amount,enabled,friends,smite"
How to configure surgemail with Centipaid (User steps)
- Log into your mailbox
- Click on Options
- Click on Advanced Options
- Click on Centipaid
- At this stage you are in the Centipaid Settings page.

Depending on the permissions granted to you by the system administrator,
you can set any of the following options.
Merchant number: The account number to which email postage will be
credited, this is available on email accounts where the email holder has
his/her own merchant account with Centipaid. If it is not available to
the user, then please assume that the mail administrator has set this
value for the domain.
Merchant password: The receipt server password assigned by
Centipaid to the merchant ID above.
Link to payment page: Usually this is
https://pay.centipaid.com/index.php unless told otherwise by Centipaid
on signup.
Payment page language: The language of the payment page, default
is english.
Amount to charge: This is the email postage to request in US
dollars.
Enable CentiPaid: If checked, you can enable email postage with
your account, otherwise it is disabled.
Charge friends: If selected, surgemail will request email postage
to be paid from everyone including friends emails. If you do not want to
charge friends then please unselect this option.
Charge on SmiteCRC score: If the Smite score is higher than this
number, then request email postage to be paid to accept for delivery.
Now that you understand how to configure your email, you can setup your
account to handle spam and unknown senders in the following configurations:
SmiteSpam and Email postage:
In this configuration all email messages are assigned a spam score by
SmiteSpam. The user can choose the maximum score number to accept without
requesting email postage. This configuration eliminates false positives
from being lost, so a user prompts the sender to pay instead of dropping the
message. The message will be held for delivery for a period set by the
admin, before it is dropped, unless payment is received and message is
delivered.
NOTE: Incoming email messages with postage bypass the SmiteSpam
process and are delivered to the recipient.
To use this configuration make sure:
- Enable CentiPaid -
Checked
- Charge friends - Checked
- Charge on SmiteCRC score is set to 1 or higher
Friends and Email postage:
In this configuration user who are NOT on the friends list are requested to
pay email postage using Centipaid. This configuration is ideal for
business email account, where unsolicited email is not accepted and only
known email from known senders are allowed to be delivered. Incoming email
messages with email postage bypass the Friends process and are delivered to
the recipient.
To use this configuration make sure:
- Enable CentiPaid - Checked
- Charge on SmiteCRC score is set to 0 or higher if want to
combine with SmiteCRC
|