[sniffer] Re: Increase spam

2006-10-18 Thread Jim Matuska Jr.








I myself am seeing an increase in spam
making it through although at the same time I am seeing an increase in caught
spam as well, so I think sniffer seems to be catching spam ok but there appears
to be just more spam in general it has to deal with and thus a few more
slipping through. Most of the new caught spam seems to be mainly from the
experimental class so I definitely would recommend looking at raising the
weight of that test if you can. Personally I see very few false positives
on any of the sniffer tests, I have the really accurate ones to delete
automatically with just one sniffer return code and the experimental and
similar tests set to hold for 7 days in users spam folder after which they are
automatically deleted. We have about a 92%+ spam vs 8%+- legitimate email
rate, really scary when you think about most of your email being junk. 





Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Filippo Palmili
Sent: Wednesday, October 18, 2006
8:45 AM
To: Message Sniffer Community
Subject: [sniffer] Increase spam





What's going on with the Sniffer settings?
In last days I'm receiving so many spam mails, it looks like the Sniffer is not
working.
Please advise
Thanks
Filippo








[sniffer] Re: yahoo mail problems

2006-10-17 Thread Jim Matuska Jr.








http://www.dnsreport.com/
is another good site to test your dns/email setup as well. 





Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Computer House Support
Sent: Tuesday, October 17, 2006
8:54 AM
To: Message Sniffer Community
Subject: [sniffer] Re: yahoo mail
problems







I would recommend checking your mail server logs for a more
detailed description of the bounce error. You may find that it is a DNS
or spam blacklist issue. www.dnsstuff.com
is a good resource.

















Michael Stein
Computer House













- Original Message - 





From: Tech
Support 





To: Message
Sniffer Community 





Sent: Tuesday, October
17, 2006 10:50 AM





Subject: [sniffer] yahoo
mail problems









Im sorry to post this here but we are desperately
looking for opinions quickly as this has becoming a real issue to us and I
could not think of any better place to find truly technical mail server folks J





We seem to be having multiple mail servers on multiple networks having
issues sending to yahoo servers for going on 36 hours now

these are a variety of server types on a variety of networks 

telnet on port 25 is usually getting this 

451 Message temporarily deferred - 4.16.50

keep in mind that some of our servers are having no issues sending mail 

any one else having this issue












[sniffer] Re: yahoo mail problems

2006-10-17 Thread Jim Matuska Jr.








Would you happen to be running Microsoft
DNS server?  I ran into something similar a while back with certain dns queries
were corrupted for domains that used certain extended dns queries.  It turned
out in our case that our firewalls were removing the ends of the extended dns
packets because they were over limit.  Have you made any firewall changes
recently?  



Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Computer House Support
Sent: Tuesday, October 17, 2006
9:44 AM
To: Message Sniffer Community
Subject: [sniffer] Re: yahoo mail
problems







Weird. I found that only certain domains on our server
are having the problem. One domain can successfully send mail to [EMAIL PROTECTED]but when I try
mail to this addressfrom my domain, it fails.











The other error we are seeing is: rl-recv: connection
reset

















Michael Stein
Computer House







- Original Message - 





From: Tech
Support 





To: Message
Sniffer Community 





Sent: Tuesday, October
17, 2006 12:18 PM





Subject: [sniffer] Re:
yahoo mail problems









This issue is occurring for us with the
following platforms



Windows with Imail, smartermail  Mail
enable

Linux  about ½ our cpanel servers



Exchange servers  at least 1/3 of
them













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Computer House Support
Sent: Tuesday, October 17, 2006
12:27 PM
To: Message Sniffer Community
Subject: [sniffer] Re: yahoo mail
problems







Are those of us having this problem all running an Imail
server?

















Michael Stein
Computer House













- Original Message - 





From: Matrosity
Hosting 





To: Message
Sniffer Community 





Sent: Tuesday, October
17, 2006 12:08 PM





Subject: [sniffer] Re:
yahoo mail problems









same here









Bill
Foresman 
Matrosity
Hosting 
www.matrosity.com 
850.656.2644
















From: Message
Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Tech Support
Sent: Tuesday, October 17, 2006
11:52 AM
To: Message Sniffer Community
Subject: [sniffer] Re: yahoo mail
problems

Thanks, but were not blacklisted and there
are no entries other than message has been deferred L













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Computer House Support
Sent: Tuesday, October 17, 2006
11:54 AM
To: Message Sniffer Community
Subject: [sniffer] Re: yahoo mail
problems







I would recommend checking your mail server logs for a more
detailed description of the bounce error. You may find that it is a DNS
or spam blacklist issue. www.dnsstuff.com
is a good resource.

















Michael Stein
Computer House













- Original Message - 





From: Tech
Support 





To: Message
Sniffer Community 





Sent: Tuesday, October
17, 2006 10:50 AM





Subject: [sniffer] yahoo
mail problems









Im sorry to post this here but we are desperately
looking for opinions quickly as this has becoming a real issue to us and I
could not think of any better place to find truly technical mail server folks J





We seem to be having multiple mail servers on multiple networks having
issues sending to yahoo servers for going on 36 hours now

these are a variety of server types on a variety of networks 

telnet on port 25 is usually getting this 

451 Message temporarily deferred - 4.16.50

keep in mind that some of our servers are having no issues sending mail 

any one else having this issue
















[sniffer] Re: Am I submitting to s...@sortmonster.com properly

2006-08-22 Thread Jim Matuska Jr.
Pete,
Is there any way to deal with the other new attachment based spasm we have
been seeing recently?  I see a lot coming in that only say here is your
invoice and have an invoice.doc (or similar attachment).  Inside the word
file is the spam itself.  I've seen a bunch of these in the last week or so,
I initially thought they were viruses, but none of my virus scanners picked
them up as such and their contents were just a bunch of spam.   

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf
Of Pete McNeil
Sent: Tuesday, August 22, 2006 2:34 PM
To: Message Sniffer Community
Subject: [sniffer] Re: Am I submitting to [EMAIL PROTECTED] properly

Hello David,

I think this format should come through fine. Phishing is a constant
challenge because it is so variable and so close to a legitimate
message (on purpose).

I will code some rules for the message you submitted and I'm sure
Jason (Lead Rule Tech) will see this note and help us watch for these
more closely.

Thanks!

_M

Tuesday, August 22, 2006, 5:10:58 PM, you wrote:

 
   
   
 I just want to know if I am submitting spam emails to
 [EMAIL PROTECTED] properly being in Australia we see a lot of
 spam targeting ANZ, National and Commonwealth bank and they seem to
 be evading the Sniffer program so when I send a spam to
 [EMAIL PROTECTED] (I am using Outlook 2003) I copy and paste the
 header and forward the email to [EMAIL PROTECTED] is this working
 properly. Please see example below.
   
  
   
 Regards David Moore
   
  
   
  
   
 Received: from dialup-82-207-6-125.lv.ukrtel.net [82.207.6.125] by
romtech.com.au
   
   (SMTPD-8.22) id A82E053C; Tue, 22 Aug 2006 23:35:42 +1000
   
 Message-ID: [EMAIL PROTECTED]
   
 From: Commonweal Bank of Australia [EMAIL PROTECTED]
   
 To: [EMAIL PROTECTED]
   
 Subject: Commonweal Bank of Australia new security features.
   
 Date: Tue, 22 Aug 2006 10:45:09 +0400
   
 MIME-Version: 1.0
   
 Content-Type: multipart/alternative;
   
     boundary==_NextPart_000_001D_01C6C5D8.0A0008A0
   
 X-Priority: 3
   
 X-MSMail-Priority: Normal
   
 X-Mailer: Microsoft Outlook Express 6.00.2900.2527
   
 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
   
 X-mxGuard-Info: Processed by romtech.com.au using mxGuard v2.4
   
 X-mxGuard-SpoolID: 082d00a1ecb1
   
 X-mxGuard-Sender: [EMAIL PROTECTED]
   
 X-mxGuard-Virus-Info: No viruses detected
   
 X-mxGuard-Spam-Score: 0
   
 X-mxGuard-Spam-Probability: CLEAN
   
 X-Note: This message has been scanned for spam and viruses by
 mxGuard for IMail (www.mxguard.com)
   
 X-RCPT-TO: [EMAIL PROTECTED]
   
 Status: U
   
 X-UIDL: 454949852
   
 X-IMail-ThreadID: 082d00a1ecb1
   
  
   
   

   
   
 From: Commonweal Bank of Australia [mailto:[EMAIL PROTECTED] 
  Sent: Tuesday, 22 August 2006 4:45 PM
  To: [EMAIL PROTECTED]
  Subject: Commonweal Bank of Australia new security features.
   
  
   
 It has come to our attention that your account needs to be
 confirmed due to the recent changes we have made to our NetBank online
system.
  We contacted you for the following reason: Confirm your
 Information in order to activate new NetBank security features for
 your account. Be sure to log in securely by following the link
 below. It's important that you confirm your NetBank account
 information otherwise you will not be able to access our online
 services. We encourage you to login in to your Commonwealth Bank
 account as soon as possible to help avoid this. 
  
  Click here
  
  We appreciate your understanding as we work to ensure account safety.
  
  Sincerely,
  Commonweal Bank of Australia management stuff.
  
  Email ID: GFR97DF
   
  
   
  
   
   
 


-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]







#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: Sharon Daniels is out of the office.

2006-08-07 Thread Jim Matuska Jr.
Pete unsubscribed them earlier, so you shouldn't get any more.  Yeah!

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf
Of John T (Lists)
Sent: Monday, August 07, 2006 11:11 AM
To: Message Sniffer Community
Subject: [sniffer] Re: Sharon Daniels is out of the office.

Bleeping wonderful.

We have to put up with this for a week?

I guess a nice little Outlook rule is called for.

John T
eServices For You

Seek, and ye shall find!


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf
Of
 [EMAIL PROTECTED]
 Sent: Monday, August 07, 2006 10:02 AM
 To: Message Sniffer Community
 Subject: [sniffer] Sharon Daniels is out of the office.
 
 
 
 
 
 I will be out of the office starting  07/08/2006 and will not return until
 15/08/2006.
 
 I will respond to your message when I return.  If your request is urgent
 please resend your message to [EMAIL PROTECTED] or call 623-5700.
 
 Have a great day!
 Sharon
 
 
 
 #
 
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]




#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]







#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: Help

2006-07-27 Thread Jim Matuska Jr.








It sure sounds like a server issue to me
and not a spam filtering issue. However, on that issue, wouldnt WHITELIST
TODOMAIN @mydomain whitelist all email going to your domain? Its
been a while since Ive run declude but that seems like it shouldnt
be right. 







Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]













From: Message Sniffer
Community [mailto:[EMAIL PROTECTED] On
Behalf Of Filippo Palmili
Sent: Thursday, July 27, 2006 9:11
AM
To: Message Sniffer Community
Subject: [sniffer] Re: Help





Whese:

#=
WHITELISTS ===

#WHITELISTHABEAS
PREWHITELIST ON
WHITELISTAUTH
#WHITELISTLOCAL

#(PRO version only) enables addresses in the web address book to automatically
be white listed.
#AUTOWHITELISTON

# - Domain Example -WHITELIST
FROM
@declude.com

# - User Example -WHITELIST
FROM
[EMAIL PROTECTED]

# - IP Example - 
#WHITELISTIP
63.246.13.90

# - TO Example - 
#WHITELIST TO
postmaster@
#WHITELIST TO
abuse@

WHITELIST TO [EMAIL PROTECTED]
WHITELIST TO [EMAIL PROTECTED]

WHITELIST TODOMAIN @mydomain
WHITELIST TODOMAIN @mydomain
WHITELIST TODOMAIN @mydomain
WHITELIST TODOMAIN @mydomain


Filippo

At 18:06 27/07/2006, you wrote:



***
My mail server have the relay activated only for certain IP address and
networks.
Filippo
***

Sorry, I didn't read your message close enough.

What whitelist settings do you have in global.cfg?

Paul Navarre



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to [EMAIL PROTECTED]








[sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Jim Matuska Jr.
Has anyone else been getting an excess amount of ebay phishing emails making
it through sniffer today?  I have personally received a couple of them and
have multiple users reporting the same.  I have forwarded them to the
sniffer spam@ address if you can take a look Pete it would be much
appreciated.

Thank You,

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 





#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



RE: [sniffer] False Positives

2006-02-15 Thread Jim Matuska Jr.
Pete,
Is there anyway to get an automatic response similar to the one listed below
for the FP address, but for submissions to your spam@ address?  It would be
nice to get some feedback when submitting spam.  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Wednesday, February 15, 2006 1:28 PM
To: Kevin Rogers
Subject: Re: [sniffer] False Positives

On Wednesday, February 15, 2006, 3:54:50 PM, Kevin wrote:

KR My users have been getting a lot of FPs by Sniffer lately.  They send me
KR the email with the FULL HEADERS displayed and I forward this email on to
KR SortMonster.  The program they use to analyze incoming submissions check
KR MY email headers, determine that SNIFFER was not at fault and sends me
KR back an email saying it didn't find any flags.

Just to clarify a bit, here is the standard response you're probably
talking about:

[FPR:0]

The message did not match any active black rules as submitted. The rules
may have been modified or removed. If you provide matching log entries
from your system then we can research this further.

Note that sometimes our false processing system may not identify the
rules that matched this message on your system due to changes in the
submitted content that might occur during the forwarding process.

Please also be sure you are running the latest version, that your
rulebase file is up to date, and that you do not have any unresolved
errors in your Sniffer log file. Bug fixes in newer versions may resolve
false positive issues or reduce the risk of false positives through
enhanced features and new technologies. Certain errors in your log file
may indicate a corrupted rulebase.

---

The software we use to scan false positive submissions is a version of
SNF that includes every rule we have in our system. If the messages
does not match any of these rules, MOST of the time it means that the
rule has been removed already.

If that is not the case, then the next step is to provide matching log
entries. On some systems this is not necessary because the headers may
already contain SNF x-header data that shows the rules involved.

This process is not intended to make things difficult, but to save
time. The majority of the time, our local scanner will identify the
rule or rules in question and we will respond accordingly.

When that is not the case we simply need more data to move forward
with the investigation.

Usually, when a rule is still in the system and it does not match a
false positive submission it is because the original message was
altered during the forwarding process or that some condition of being
attached has prevented the scanner on this end from reproducing the
result you had on your system.

Hope this helps,

_M



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: [sniffer] Automate MDaemon Updating

2006-02-02 Thread Jim Matuska Jr.
We actually did that exact thing, went from Imail to MDaemon when Imail
started drastically increasing their prices a year or so ago.  We are using
the same scripts now with MDaemon that we used in Imail and they just fine
(I think they may be Bills Landry's scripts).  As for license file, it
transferred over without any issues either.  The plugin works great too,
MDaemon is much better than Imail, although I do miss declude functionality.
We have MDaemon setup to automatically delete spam messages based upon some
of the higher accuracy return codes (such as the adult themed ones) and have
the ones that have a higher false positive chance to simply move the spam
messages to the MDaemon user spam directory.  I also setup a rule to
automatically delete these spam captured messages every 5 days from the
users spam directories to keep the clutter down.  This works great for us
and I would highly recommend that transition.  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Grant Stufft
Sent: Thursday, February 02, 2006 9:25 AM
To: sniffer@SortMonster.com
Subject: [sniffer] Automate MDaemon Updating

Has anyone got an automated updating script for updating rulebases for 
MDaemon.  I am just demoing the software now.  The plugin seems to be 
working well.  I have used the Imail script from the website that Bill 
Landry contributed (thanks Bill).  Is there a way to automatically send 
the conformation email that the update worked as it was supposed to like 
it does in IMail?  If we discontinue Imail usage and go to MDaemon will 
the Sniffer license transfer OK?  (Only running one server with it at a 
time).

Thanks,

Grant
---
[This E-mail scanned for viruses by EA Media Internet Services]



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


[sniffer] Stock Market Spam Messages

2006-01-26 Thread Jim Matuska Jr.
I seem to be noticing a lot of spam messages recently that are stock ads for
offshore companies; I seem to be getting a lot of these that are not being
classified by sniffer.  I have been forwarding these to the spam@ address,
but have yet to notice any real changes.  Any thoughts on these?  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


attachment: winmail.dat

RE: [sniffer] Stock Market Spam Messages

2006-01-26 Thread Jim Matuska Jr.
The ones I seem to be getting have no images, and are only plain text.  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Thursday, January 26, 2006 8:53 AM
To: Jim Matuska Jr.
Subject: Re: [sniffer] Stock Market Spam Messages

On Thursday, January 26, 2006, 11:22:40 AM, Jim wrote:

JMJ I seem to be noticing a lot of spam messages recently that are stock
ads for
JMJ offshore companies; I seem to be getting a lot of these that are not
being
JMJ classified by sniffer.  I have been forwarding these to the spam@
address,
JMJ but have yet to notice any real changes.  Any thoughts on these?  

There has been a recent shift to using randomized images for these
which makes them a bit harder to defeat.

I'll take a look.

_M



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: Re[2]: [sniffer] Stock Market Spam Messages

2006-01-26 Thread Jim Matuska Jr.
They seem to be different ones sporadically over the last week or so.  I'll
keep an eye on any new ones and let you know if they change.  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Thursday, January 26, 2006 10:54 AM
To: Jim Matuska Jr.
Subject: Re[2]: [sniffer] Stock Market Spam Messages

I see. I misunderstood. We generally get text based stock-push
campaigns very quickly. We have seen an increase in these recently
tough.

If it's a plain text stock push then it's most likely that you saw it
before we did. I'll make sure that the rest of the team are watching
out for these just in case - (we have two new guys on the team,... if
they pushed it back then we might have been delayed in coding for
it).

Those guys are on this list too so they'll see this note when the get
a minute.

If you see the same one repeatedly then please .zip it and send a copy
to support as a chronic spam.

The other night I saw a burst of more than 5 new stock push campaigns
come out in the same 10 minute period across the spamtraps. I thought
that was unusual. It's possible, perhaps even likely, that you got
this burst before we saw it.

Please let use know if you're getting the same one repeatedly or
different ones.

Thanks,

_M

On Thursday, January 26, 2006, 11:55:52 AM, Jim wrote:

JMJ The ones I seem to be getting have no images, and are only plain text.

JMJ Jim Matuska Jr.
JMJ Computer Tech2, CCNA
JMJ Nez Perce Tribe
JMJ Information Systems
JMJ [EMAIL PROTECTED]

JMJ  


JMJ -Original Message-
JMJ From: [EMAIL PROTECTED]
JMJ [mailto:[EMAIL PROTECTED]
JMJ On Behalf Of Pete McNeil
JMJ Sent: Thursday, January 26, 2006 8:53 AM
JMJ To: Jim Matuska Jr.
JMJ Subject: Re: [sniffer] Stock Market Spam Messages

JMJ On Thursday, January 26, 2006, 11:22:40 AM, Jim wrote:

JMJ I seem to be noticing a lot of spam messages recently that are stock
JMJ ads for
JMJ offshore companies; I seem to be getting a lot of these that are not
JMJ being
JMJ classified by sniffer.  I have been forwarding these to the spam@
JMJ address,
JMJ but have yet to notice any real changes.  Any thoughts on these?  

JMJ There has been a recent shift to using randomized images for these
JMJ which makes them a bit harder to defeat.

JMJ I'll take a look.

JMJ _M



JMJ This E-Mail came from the Message Sniffer mailing list. For information
and
JMJ (un)subscription instructions go to
JMJ http://www.sortmonster.com/MessageSniffer/Help/Help.html






JMJ This E-Mail came from the Message Sniffer mailing list. For
JMJ information and (un)subscription instructions go to
JMJ http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: [sniffer] Last chance to renew at the old price!

2005-12-27 Thread Jim Matuska Jr.
Is it possible to pay low price extend your subscription more than one year
at the current price or would you only be able to get 1 more year at the low
price and have to pay later years at the full rate?  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Michael Murdoch
Sent: Tuesday, December 27, 2005 12:57 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Last chance to renew at the old price!

1) The monthly rate is going to $ 45.00.

2) It would be a one year extension to your current subscription and
then your next renewal would be at the new price.  For example, if your
license expires 02/08/2006, your next renewal would be on 02/08/2007.  

This is offer is completely optional and is available to all existing
customers.  

Thanks,
MM

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, December 27, 2005 2:47 PM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] Last chance to renew at the old price!

1) what will the monthly rate be after 2005?

2) If we where to renew at the current rate, how long will that rate be
good 
for?  As you mentioned grandfathered - is this forever or just one year.






This E-Mail came from the Message Sniffer mailing list. For information
and (un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html






This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: Re[4]: [sniffer]

2005-11-10 Thread Jim Matuska Jr.
We are running Sniffer with the Mdaemon plug-in and SA and it seems to work
great for us, much better than our previous Imail/Declude sniffer
combination.  

Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Thursday, November 10, 2005 9:36 AM
To: Peer-to-Peer (Support)
Subject: Re[4]: [sniffer]

On Thursday, November 10, 2005, 11:45:48 AM, Peer-to-Peer wrote:

PtPS _M,

PtPS _M said will create a default installation that emits headers
and puts
PtPS a .cf file in place for SA to interpret them.

PtPS Not sure if this is relevant to your thought process, but we feel that
SA
PtPS (SpamAssassin) does more harm than good.  Under moderate loads it
bogs-down
PtPS MDaemon so we always have SA disabled.  Sniffer is by far superior in
every
PtPS category, (accuracy, speed, dependability etc...) so there's no need
to use
PtPS SpamAssassin.

PtPS My point: Keep in mind that some of us use sniffer independently (not
tied
PtPS to SA).  We're using sniffers .cfg plug-in for MD ver 8.
PtPS I assume you will, and I probably misunderstood your post, but just
wanted
PtPS to mention this out-loud.

Thanks for this! I think it's the first time I've heard it said out
loud from anyone involved with MDaemon. As a result I'm operating
under the assumption that folks who install SNF on MDaemon _most
likely_ have SA running and so that would be the simplest default
installation.

Is that true (do you think) or is it now more likely that SA would be
disabled?

In any case, the installer is intended for someone who just wants to
push the button and have it work. In that context, what is the best
default install?

All that said, once the installation is complete, a technically savvy
person could reconfigure SNF to and MDaemon to work in any way they
prefer. We're definitely not going to do anything to make that more
difficult.

Thanks,

_M



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html





This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html