RE: [sniffer] Spam Storm Alert...
My only suggestion for QM is to disable DNS Cache and Failed Domain Skipping, both of these caused problems for me in the early 8.xx versions, so I have just left them off. As far a the thread settings, that really depends on how many messages you process per day. You may find some guidance in the IMail archive and/or the IMail knowledge base. Bill -Original Message- From: Glenn Ratliff [mailto:[EMAIL PROTECTED] Sent: Saturday, January 29, 2005 6:15 PM To: 'sniffer@SortMonster.com' Subject: RE: [sniffer] Spam Storm Alert... This is question is a little off subject, but do you have any recommendations for Imail queue manager settings? We are running Sniffer with declude 1.82 under Imail 8.15 and the server seems to bog down sometimes. Thanks, Glenn --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Spam Storm Alert...
Hmmm, a day and a half later this shows up on the list...??? Bill -Original Message- From: Landry William Sent: Saturday, January 29, 2005 6:51 PM To: sniffer@SortMonster.com Subject: RE: [sniffer] Spam Storm Alert... My only suggestion for QM is to disable DNS Cache and Failed Domain Skipping, both of these caused problems for me in the early 8.xx versions, so I have just left them off. As far a the thread settings, that really depends on how many messages you process per day. You may find some guidance in the IMail archive and/or the IMail knowledge base. Bill -Original Message- From: Glenn Ratliff [mailto:[EMAIL PROTECTED] Sent: Saturday, January 29, 2005 6:15 PM To: 'sniffer@SortMonster.com' Subject: RE: [sniffer] Spam Storm Alert... This is question is a little off subject, but do you have any recommendations for Imail queue manager settings? We are running Sniffer with declude 1.82 under Imail 8.15 and the server seems to bog down sometimes. Thanks, Glenn --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Spam Storm Alert...
Well, after a second look (reviewing the headers), it looks like the message got hung-up in the convoluted mess of internal mail gateways that Siemens maintains (which I have no control over). Sorry for the noise...! Bill -Original Message- From: Landry William Sent: Monday, January 31, 2005 9:19 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Spam Storm Alert... Hmmm, a day and a half later this shows up on the list...??? Bill -Original Message- From: Landry William Sent: Saturday, January 29, 2005 6:51 PM To: sniffer@SortMonster.com Subject: RE: [sniffer] Spam Storm Alert... My only suggestion for QM is to disable DNS Cache and Failed Domain Skipping, both of these caused problems for me in the early 8.xx versions, so I have just left them off. As far a the thread settings, that really depends on how many messages you process per day. You may find some guidance in the IMail archive and/or the IMail knowledge base. Bill -Original Message- From: Glenn Ratliff [mailto:[EMAIL PROTECTED] Sent: Saturday, January 29, 2005 6:15 PM To: 'sniffer@SortMonster.com' Subject: RE: [sniffer] Spam Storm Alert... This is question is a little off subject, but do you have any recommendations for Imail queue manager settings? We are running Sniffer with declude 1.82 under Imail 8.15 and the server seems to bog down sometimes. Thanks, Glenn --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- This message and any included attachments are from Siemens Medical Solutions USA, Inc. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to [EMAIL PROTECTED] Thank you This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Spam Storm Alert...
This is question is a little off subject, but do you have any recommendations for Imail queue manager settings? We are running Sniffer with declude 1.82 under Imail 8.15 and the server seems to bog down sometimes. Thanks, Glenn -- From: Pete McNeil[SMTP:[EMAIL PROTECTED] Reply To: sniffer@SortMonster.com Sent: Monday, January 24, 2005 2:11 PM To: sniffer@sortmonster.com Subject: [sniffer] Spam Storm Alert... Hello sniffer, Yes folks, in case you haven't already seen it, we have quite a spam storm going. I've just watched more than a dozen new campaigns with heavy polymorphism push through the filters since 1300 EST and early this morning we were already at our daily nominal number for new rules. The way it looks now we might double that... Check here for details as they progress: http://www.sortmonster.com/MessageSniffer/Performance/ChangeRates.jsp As of now I am declaring spam storm rules which means we will be accelerating new rule generation efforts and operating in a spam-noc mode for at least the next several hours. This may delay other support requests for a bit. Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Spam Storm Alert Follow Up
For what it's worth, I'm definitely seeing an increase in volume over the weekend (double the spam, actually), and I believing it is tapering off already. In addition to the volume of separate messages, the number of recipients is generally up. The messages look generally like the kind of jobs outsourced to spam gangs, who then create variations of the email. I haven't looked close enough to check whether the payload URLs are the same. YMMV... Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, January 24, 2005 11:15 AM To: sniffer@sortmonster.com Subject: [sniffer] Spam Storm Alert Follow Up Hello sniffer, One other note before I go join the rule coders... Many of the new spam coming through are resurrecting old spam rules... I've seen this kind of thing before (which is why we have a deep-scan robot looking for this kind of activity), however I've not seen it in such numbers before. Something interesting is definitely going on. Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
