Re: [sniffer] Required reload question?
On Friday, December 10, 2004, 12:14:22 PM, Rick wrote: RR If I make a change to any of the whitelist,blacklist, or trusted files, and RR I'm using sniffer in a 'persistent' mode, do I have to restart anything to RR pick up the changes? I'm not sure I completely understand. If there are changes to your rulebase then they will be recognized on the next update. If you adjust the .cfg file, it will be recognized on the next reload, by default every 10 minutes, or you can issue the reload command and the persistent server will loop right away. Nothing else should be necessary. Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: RE: [sniffer] Required reload question?
I think the files you mentioned are for mxGuard only. They are separate from Message Sniffer and do not require you to restart anything. Craig it's the 'definition' of what is my rulebase that is unclear here. Specifically, if I add a domain name in the file 'whitelist.sender' in my mxguard directory (under my imail directory), will this be recognized without restarting my sniffer process? I'm not changing the 'cfg' file in this example. Rick Robeson getlocalnews.com [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Friday, December 10, 2004 10:06 AM To: Rick Robeson Subject: Re: [sniffer] Required reload question? On Friday, December 10, 2004, 12:14:22 PM, Rick wrote: RR If I make a change to any of the whitelist,blacklist, or trusted RR files, and RR I'm using sniffer in a 'persistent' mode, do I have to restart RR anything to RR pick up the changes? I'm not sure I completely understand. If there are changes to your rulebase then they will be recognized on the next update. If you adjust the .cfg file, it will be recognized on the next reload, by default every 10 minutes, or you can issue the reload command and the persistent server will loop right away. Nothing else should be necessary. Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Required reload question?
On Friday, December 10, 2004, 1:11:48 PM, Rick wrote: RR it's the 'definition' of what is my rulebase that is unclear here. RR Specifically, if I add a domain name in the file 'whitelist.sender' in my RR mxguard directory (under my imail directory), will this be recognized RR without restarting my sniffer process? I'm not changing the 'cfg' file in RR this example. That kind of change is outside of SNF and won't effect it. Best, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Required reload question?
it's the 'definition' of what is my rulebase that is unclear here. Specifically, if I add a domain name in the file 'whitelist.sender' in my mxguard directory (under my imail directory), will this be recognized without restarting my sniffer process? I'm not changing the 'cfg' file in this example. Rick Robeson getlocalnews.com [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Friday, December 10, 2004 10:06 AM To: Rick Robeson Subject: Re: [sniffer] Required reload question? On Friday, December 10, 2004, 12:14:22 PM, Rick wrote: RR If I make a change to any of the whitelist,blacklist, or trusted files, and RR I'm using sniffer in a 'persistent' mode, do I have to restart anything to RR pick up the changes? I'm not sure I completely understand. If there are changes to your rulebase then they will be recognized on the next update. If you adjust the .cfg file, it will be recognized on the next reload, by default every 10 minutes, or you can issue the reload command and the persistent server will loop right away. Nothing else should be necessary. Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] test sender
Title: Message Well, an indirect way to do this is to use the (undocumented?) Declude directive: rsp set off TESTNAME as the first bit of text in your test message. That won't actually trigger sniffer, but it will for the purpose of making your JunkMail think that the test has been triggered. Andrew 8) -Original Message-From: Bonno Bloksma [mailto:[EMAIL PROTECTED] Sent: Friday, December 10, 2004 1:26 PMTo: [EMAIL PROTECTED]Subject: [sniffer] test sender Hi, Is there a test sender where I can have the program send us a test mail that should fail a specific sniffer test? I know I can test sniffer itself agains a single good and bad file, but I want to test the chain. The Declude site has something like that where it is sending the EICAR teststringin the various ways a virus might reach the mailserver. That way the full setup of the mailserver with the scanner can be tested. I would like something where I can send myself a msg which should fail with an exitcode for TRAVEL or for PORN etc. That way I can test for sure whether my "improvements" haven't broken something in stead of waiting till my users complain (certain) spam has increased. It's the small typos that can get to ya in a big way. ;-) Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? _
[sniffer] Anyone running Sniffer on SuSe Linux w/ the 2.6 kernel ??
Hello sniffer, I am curious to know if anyone is running sniffer on the 2.6 kernel of Linux? Specifically SuSe 9.2. Please contact me off list. Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer][sniffer]
Katie, Take a copy of the failed message and submit it to [EMAIL PROTECTED] with your lcinese base ID and they will tell you why it failed and setup a whiterule to prevent it from being tagged in the future. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. Katie LaSalle-Lowery writes: Would anyone be able to help me determine why a message is caught by sniffer? Sniffer is catching mail from our sister company. I could send a test from that server... Thanks! Katie LaSalle-Lowery Centric Internet Services 1410 Reserve St. Missoula, MT 59801 Local Phone 549-3337 ext. 21 Toll Free (888)593-2776 ext. 21 Fax (406)721-3438 This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
