[sniffer] Re: Gateway solution
We use XWall (www.dataenter.com http://www.dataenter.com/ ) on some of our gateway servers - it's very efficient, but not sure about running Sniffer on there - however, it's no-doubt possible. It's described as a product for feeding into Exchange, but in reality it works with any SMTP server. Nick Marshall Giacom World Networks Ltd Tel +44 (0) 870 740 Mobile +44 (0) 7799 060 555 Fax +44 (0) 870 740 7177 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IMPORTANT: Legally privileged/confidential information may be contained in this message. If you are not the addressee(s) legally indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet e-mail messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorised representative independent of this message. Please note that neither my employer nor I accept any responsibility for viruses and it is your responsibility to scan attachments (if any). This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify me by returning the email. _ From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of David Fletcher Sent: 06 March 2008 14:57 To: Message Sniffer Community Subject: [sniffer] Gateway solution We currently have Sniffer running as a SpamAssassin plugin on a BSD box. This server is acting as a gateway for inbound email and we have been very pleased with the results. We are re-evaluating our setup in light of a lack of BSD/Linux/Unix experience in our staff and are looking for suggestions. We would like a windows based solution for a gateway. The following features are greatly desired: .Message Sniffer (of course) .Recipient verification (may be based on a text file of valid addresses or query of the backend server) .Greylisting .Integration with SpamAssassin would be ideal .Virus scanning is also required. ClamAV or the like is fine for our needs. We have a relatively low message volume, and cost is a consideration. Thanks, David _ Giacom mail management by MessageStream
[sniffer] Re: Gateway solution
Leave it with me. Nick Marshall Giacom World Networks Ltd Tel +44 (0) 870 740 Mobile +44 (0) 7799 060 555 Fax +44 (0) 870 740 7177 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IMPORTANT: Legally privileged/confidential information may be contained in this message. If you are not the addressee(s) legally indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet e-mail messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorised representative independent of this message. Please note that neither my employer nor I accept any responsibility for viruses and it is your responsibility to scan attachments (if any). This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify me by returning the email. _ From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 06 March 2008 15:42 To: Message Sniffer Community Subject: [sniffer] Re: Gateway solution Hello Nick, Thursday, March 6, 2008, 10:25:18 AM, you wrote: We use XWall ( http://www.dataenter.com/ www.dataenter.com) on some of our gateway servers - it's very efficient, but not sure about running Sniffer on there - however, it's no-doubt possible. It's described as a product for feeding into Exchange, but in reality it works with any SMTP server. Would you be willing to do some experimenting with this using the new version of SNF? Since you already have experience with XWall that would probably go quickly for you. If you could develop a quick installation guide with some screen shots then we can post XWall as an additional integration option. Thanks for the tip! _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. _ Giacom mail management by MessageStream # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Away from office
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Away from office
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Away from office
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Away from office
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Re: Lots of drug spam getting through
We're seeing similar - I keep submitting them to [EMAIL PROTECTED], but the same type of spam keeps getting through... Nick Marshall Legally privileged/confidential information may be contained in this message. If you are not the addressee(s) legally indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet e-mail messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorised representative independent of this message. Please note that neither my employer nor I accept any responsibility for viruses and it is your responsibility to scan attachments (if any). This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify me by returning the email. -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: 21 August 2006 15:33 To: Message Sniffer Community Subject: [sniffer] Lots of drug spam getting through We are seeing tons of spam coming through with the subject Re: new ... and advertising drugs. Any luck on stopping this? Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] _ Giacom mail management by MessageStar -- [This e-mail was scanned for viruses by Giacom Anti-Virus] # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
RE: [sniffer] MailEnable+sniffer?
We use both MailEnable and SmarterMail having come from iMail a couple of years back. You're right, MailEnable does not have any connectivity to Sniffer or MessageExchange even though it has the MTA, but of course SmarterMail does. It would be great if there were plans to introduce Sniffer/MessageExchange to MailEnable (any plans Pete?!)as it's a great simple-to-use mail server - and the entry level version is free! However I would recommend SmarterMail for any large scale installations - MailEnable does suffer slightly under heavy load (not so much as iMail though!). Nick Marshall Giacom World Networks Ltd Tel +44 (0) 870 740 Mobile+44 (0)7799 060 555 Fax +44 (0)870 740 7177 [EMAIL PROTECTED] Legally privileged/confidential information may be contained in this message. If you are not the addressee(s) legally indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet e-mail messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorised representative independent of this message. Please note that neither my employer nor I accept any responsibility for viruses and it is your responsibility to scan attachments (if any). This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify me by returning the email. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick JusticeSent: 23 August 2005 01:33To: sniffer@SortMonster.comSubject: [sniffer] MailEnable+sniffer? HiI'm currently migrating from IMAIL for all the reasons mentioned here over the past months!Anyone out there using MailEnable?I'm shortlisted down to Smarter Mail and MailEnable and whilst the former would allow me to use my existing MessageExchange/Sniffer combo to good effect, I found I liked MailEnable so much more for a variety of reasons but cannot see any obvious hooks into MessageExchange/Sniffer - They have an MTA pick up event handler..but Im no great expert.Any comments or experience appreciated.Nick Giacom mail management by MessageExchange Giacom mail management by MessageExchange
RE: [sniffer] Moving Sniffer to Declude/SmarterMail
Pete OK, I now have much more information on this problem with Declude/Sniffer/SmarterMail. It seems the current version of Declude does not have an Overflow Directory for SmarterMail, which therefore allows unlimited Declude processes to be spawned at any time. At our peak we were seeing a surge of more than 1,000 declude.exe instances running at the same time! This of course flattened the server, and seems the reason why Sniffer was dropping out of its perpetual mode, unfortunately compounding the problem when the server had least resources. On speaking with Declude, thankfully they have been working on a version to control the number of processes running, and have let us have a BETA version which allows us to set the number of processes to a setting of our choice - we have it at 30 and it's working fine! One thing we did whilst in the middle of this was to move all the log and spool files to a standalone disk instead of the RAID5 array for the main server, and we have seen a real reduction in the physical disk queue lengths, which, under significant load, helps. Worth knowing. So the migration is complete with all users running as normal on SmarterMail instead of iMail. Hope some people can learn from our pain! Nick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 14 March 2005 19:23 To: Nick Marshall Subject: Re: [sniffer] Moving Sniffer to Declude/SmarterMail On Monday, March 14, 2005, 12:47:33 PM, Nick wrote: NM Hi there NM We've just undergone a migration of a 1,000 domain iMail server to NM SmarterMail (for obvious reasons!), and using Declude and Sniffer on NM the new system. NM However, occasionally we see Sniffer jumping out of its perpetual NM mode by spawning thousands of threads which obviously make the NM server slow down considerably. Also, at this time, the Sniffer NM folder fills up with the equivalent temporary files. NM On changing the location of Sniffer in the Declude Global file and NM allowing the threads to disappear, when Sniffer is re-engaged it NM correctly goes back to perpetual mode working from the Service instance of Sniffer. NM Can any of the above be explained? This is extremely unusual and I've not heard of this kind of thing before. The closest connection I have seen is that on one very heavily loaded system (on Linux) a change in the rulebase file caused the persistent instance to pause for a few minutes while the message instances of SNF became impatient --- however in this case the system always recovered on it's own. In your case do you restart the persistent instance or does the system simply recover once you re-enable the clients? Please post the contents of your .stat file and let me know if these are typical values. Does your system have one or two CPUs? Hyperthreading? Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html -- [This e-mail was scanned for viruses by Giacom Anti-Virus] -- [This e-mail was scanned for viruses by Giacom Anti-Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Moving Sniffer to Declude/SmarterMail
Thanks John - I didn't know that, but it would explain things... Nick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: 16 March 2005 14:40 To: sniffer@SortMonster.com Subject: RE: [sniffer] Moving Sniffer to Declude/SmarterMail One thing we did whilst in the middle of this was to move all the log and spool files to a standalone disk instead of the RAID5 array for the main server, and we have seen a real reduction in the physical disk queue lengths, which, under significant load, helps. Worth knowing. Nick It is a well known and published fact (on the Imail list) that RAID5 should never ever be used for the spool directory or any other directory that has a high write activity. This is basic physics. RAID5 should really only be used for high read activity only, such as databases where most of the writing is done to transaction (log) files and at spaced intervals those transactions are committed to the database. RAID1 or even RAID0+1 is best for the spool and logs. John Tolmachoff Engineer/Consultant/Owner eServices For You This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html -- [This e-mail was scanned for viruses by Giacom Anti-Virus] -- [This e-mail was scanned for viruses by Giacom Anti-Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Smartermail
Hi there I was contacted off-list this morning by another user with the same question - below is my reply - we moved just a few days ago from iMail to SmarterMail. Hope it helps... --- We too have been looking for an alternative to iMail for a couple of years now. A number of reasons forced our hand - the increase in price of iMail (more arrogance on their part than cost), the lack of attention they have paid to software design problems we have highlighted to them in the past, and a general slow-down of the server when dealing with many threads. So, we've been watching closely the emergence of SmarterMail and their relationship with Declude. We spoke at lengths with Declude and admired their enthusiasm for the product and the way SmarterMail's technical team seem to be willing to work with users to fine-tune future releases. SmarterTools (the company behind SmarterMail) have iMail users in their sights with a migration tools to grab all the iMail data, and mailbox contents, including address books etc, to SmarterMail. We used this and it took about 6 hours (throughout the night of course!) to migrate around 1,000 domains, 5,000 users and their content. There are a few problems we came across - one being that if the mailbox on iMail hasn't been used - ie the directory structure hasn't yet been created by iMail - the migration tool misses it. One to watch for. Declude's latest version is compatible with SmarterMail, and of course then so to is Sniffer. However, Declude Hijack hasn't been ported yet, but SmarterMail has some similar preventative measures available to do much the same thing. We have a lot of scripting behind our mail servers to automate the administration of accounts from our own control panel. We spent a couple of weeks prior to the migration getting these working on SmarterMail - we found there's nothing that can't be done that can be done on iMail. What is useful is the per-domain stats that can be automatically pulled into XML on the fly - we might run this type of gathering nightly and drop the usage data into the database for general consumption/service levels etc. So, it's all working now - and for the most, all went smoothly. Now were looking at performance. The machine we ported to is three times more powerful, so it's hard to compare exactly, however normal stats look good. We are, however, being plagued by one problem, which on closer inspection may be the cause of Sniffer perpetual dropping out - every few minutes the server will freeze for a few seconds (desktop, web services, pop3 checking, etc halt). Watching the CPU usage we see it drop to almost nothing, then at the end of the freeze, it spikes up to 100% for a few seconds - then the machine releases. It's as though there is some kind of bottleneck from a process that has higher priority over pretty much everything else. We're trying to pinpoint the problem by removing various parts to see if that helps. Today we're going to take off Declude for a few minutes and see if that's the cause. I'm sure this is not normal behaviour. We've reported it to SmarterTools and are awaiting their reply. So, in conclusion, it's a good, reasonably straightforward move considering the task. SmarterMail appears to be a much better mail server in terms of features and the user interface. But there are these few things we need to resolve to fully endorse the new server. Our users can only see basic changes such as a new WebMail facility - the rest can be made to feel the same as iMail. I'll keep you up-to-date with our progress. If Declude/Sniffer/iMail users need any more information on such a migration, I'd be glad to offer some hindsight... Nick Nick Marshall Giacom World Networks Ltd Tel +44 (0) 870 740 Mobile +44 (0) 7799 060 555 Fax +44 (0) 870 740 7177 [EMAIL PROTECTED] Legally privileged/confidential information may be contained in this message. If you are not the addressee(s) legally indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet e-mail messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorised representative independent of this message. Please note that neither my employer nor I accept any responsibility for viruses and it is your responsibility to scan attachments (if any). This email and any files transmitted are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify me by returning the email. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of sniffer Sent: 15
RE: [sniffer] Microsoft Entourage Clients
We've noticed that too just today... Nick Marshall Giacom World Networks Ltd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Patrick Rateliff Sent: 05 April 2004 16:41 To: [EMAIL PROTECTED] Subject: [sniffer] Microsoft Entourage Clients I have noticed that any messages sent from a Microsoft Entourage (Apple Computers) client are currently being captured by sniffer. I just noticed this and putting a few whitelists and work arounds in place before I explore this further. This effects 2600 machines in our district. Anyone else see this at all? -Patrick. -- Patrick Rateliff Network Administrator Lakeville Area Public Schools 952.469.7947 [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html -- [This e-mail was scanned for viruses by Giacom Anti-Virus] -- [This e-mail was scanned for viruses by Giacom Anti-Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
