[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread David Pearson
: SNF IPScan: c:\mdaemon\temp\md508.tmp, Engine Not Ready! Thu 2008-04-24 14:36:05: SNF IPScan: c:\mdaemon\temp\md509.tmp, Engine Not Ready! Not sure what I'm doing wrong. Any ideas? Thanks, David -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread David Pearson
Sorry - meant this version: SNFv2-9rc5.23.6 -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of David Pearson Sent: Thursday, April 24, 2008 2:43 PM To: Message Sniffer Community Subject: [sniffer] Re: Source distribution corrected re: snf2check

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread Peer-to-Peer (Support)
Check to be certain your .snf rulebase is in the Mdaemon\SNF folder --PTP -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] Behalf Of David Pearson Sent: Thursday, April 24, 2008 2:47 PM To: Message Sniffer Community Subject: [sniffer] Re: Source

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread Pete McNeil
@ and include your configuration log and config files. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E

[sniffer] Source distribution corrected re: snf2check utility

2008-04-21 Thread Pete McNeil
Hello Sniffer Folks, The source distribution of the SNF2-9 beta/rc has been corrected. The previous build of the source distribution was missing a compile script. The new build -- just uploaded -- contains a compile script and some minor modifications to the source code so that it can be built

[sniffer] RePost Overview of Upgrade Process from 2.3x SNF to 2-9 (V3) SNF

2008-04-18 Thread Pete McNeil
Hello Sniffer Folks, It turns out that our link to the Mail Archive has been off-line for a bit and I'm still getting questions about the upgrade process so I'm going to re-post the overview we published on 20080411. Here we go: I'm running win2003 with Imail, Mxguard v3.2 and Sniffer 2-3.2. I

[sniffer] Australian Bank Junk Emails

2008-03-08 Thread David Moore
We consistently get Australian banks phising junk emails that sortmonster doesn't seem to pickup can you add the following banks to your rules as banks very rarely send out emails. ANZ Bank WestPac St George National Australia Bank Bank of Queensland Full list here

[sniffer] MXScan for MailEnable

2008-03-07 Thread Pete McNeil
Hello Sniffer Folks, For those of you considering MailEnable, MX Uptime (www.mxuptime.com) has an anti-spam plugin that includes a fully integrated SNFEngine (the new version!). Just put in your login code and authentication string and you're good to go. Here's a screen shot link: http

[sniffer] Version 2-9rc1.8.2 Release Candidate (Std Test Package), and other plans/announcements!...

2008-03-07 Thread Pete McNeil
Hello Sniffer Folks, Today I'm releasing the first release candidate for what will become version 3 this quarter! You can find the latest here as it arrives: http://kb.armresearch.com/index.php?title=Message_Sniffer.GettingStarted.Distributions#NEW_SNF_V2-9_Wide_Beta Over the next few days we

[sniffer] Re: Version 2-9rc1.8.2 Release Candidate (Std Test Package), and other plans/announcements!...

2008-03-07 Thread Shawn Park
Pete, Great new features. I can't wait to get this installed. Thanks for the hard work. Shawn On Fri, Mar 7, 2008 at 12:24 PM, Pete McNeil [EMAIL PROTECTED] wrote: Today I'm releasing the first release candidate for what will become version 3 this quarter!

[sniffer] Gateway solution

2008-03-06 Thread David Fletcher
We currently have Sniffer running as a SpamAssassin plugin on a BSD box. This server is acting as a gateway for inbound email and we have been very pleased with the results. We are re-evaluating our setup in light of a lack of BSD/Linux/Unix experience in our staff and are looking for suggestions

[sniffer] Re: Gateway solution

2008-03-06 Thread Nick Marshall
We use XWall (www.dataenter.com http://www.dataenter.com/ ) on some of our gateway servers - it's very efficient, but not sure about running Sniffer on there - however, it's no-doubt possible. It's described as a product for feeding into Exchange, but in reality it works with any SMTP server

[sniffer] Re: Gateway solution

2008-03-06 Thread Pete McNeil
Hello Nick, Thursday, March 6, 2008, 10:25:18 AM, you wrote: We use XWall (www.dataenter.com) on some of our gateway servers its very efficient, but not sure about running Sniffer on there however, its no-doubt possible Its described as a product for feeding into Exchange

[sniffer] AW: [sniffer] Re: Gateway solution

2008-03-06 Thread Hirthe, Alexander
We use NoSpamToday (http://www.nospamtoday.com/download/server/), it's cheap (compared to the other commercial gateways), runs on Windows, has SA integrated, Greylisting and so on. But - no Sniffer. This runs on the IMail one step later :) Alex Von: Message Sniffer Community [mailto:[EMAIL

[sniffer] Re: Gateway solution

2008-03-06 Thread Nick Marshall
by returning the email. _ From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 06 March 2008 15:42 To: Message Sniffer Community Subject: [sniffer] Re: Gateway solution Hello Nick, Thursday, March 6, 2008, 10:25:18 AM, you wrote: We use

[sniffer] Status screen of SNFServer - What does it mean?

2008-02-29 Thread Shawn Park
Hello, I am using the latest beta of Message Sniffer. Can you please tell me what all of the #''s are on the status screen when SNFServer is running? Obviously M/min is messages per minute, but what do the following mean? SP: LR: [0/13 / 0 ] (the slash spins clockwise here) W: C: B: T: S

[sniffer] Away from office

2008-02-29 Thread nick . marshall
sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Away from office

2008-02-29 Thread nick . marshall
sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Proper way to setup a SNFServer on it's own box

2008-02-27 Thread Shawn Park
Hello, I searched the Wiki but could not find a proper answer to this question. If I have my mail server on it's own server, and I want to have Message Sniffer on it's own server, how would I go about setting this up? I will have the SNFServer instance running on it's own server. Does

[sniffer] Re: Proper way to setup a SNFServer on it's own box

2008-02-27 Thread Pete McNeil
Hello Shawn, Wednesday, February 27, 2008, 2:57:29 PM, you wrote: Hello, I searched the Wiki but could not find a proper answer to this question. If I have my mail server on it's own server, and I want to have Message Sniffer on it's own server, how would I go about setting this up

[sniffer] Bad Rule Alert - 1771029

2008-02-26 Thread Pete McNeil
Hello Sniffer Folks, Rule ID 1771029 was coded incorrectly for a URL fragment and matched some common dtd reference code. The rule has already been removed but it was posted to some rulebase files before the error was discovered. The rule was created earlier today (2008-02-26 06:00:18

[sniffer] Away from office

2008-02-26 Thread nick . marshall
sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Away from office

2008-02-26 Thread nick . marshall
sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Colbeck, Andrew
time and cpu time. The product can share your existing server, but is recommended for a dedicated gateway. It can scale to many gateways while sharing a central database. It'll do everything you want, actually. That's as much as I'm going to say here, because this list is all about Message Sniffer

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Pete McNeil
-- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Pete McNeil
of SA SNF is superior to either on it's own if you have the technical resources. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Ideal config for scaleable solution?

2008-02-21 Thread Paul Rogers
environment? Paul --- # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED

[sniffer] Message Sniffer Purchase requirment

2008-02-20 Thread Shawn Park
Hello, We have been evaluating Message Sniffer for the past month and are ready to make a purchase, but we have one question. One the order page, it states: Please note that the email address you provide must be on the server that will be using Message Sniffer. What exactly does this mean

[sniffer] Re: Message Sniffer Purchase requirment

2008-02-20 Thread Shawn Park
Pete. This makes much better sense to me now. Thanks for the quick reply. Shawn On Wed, Feb 20, 2008 at 3:00 PM, Pete McNeil [EMAIL PROTECTED] wrote: Hello Shawn, Wednesday, February 20, 2008, 5:35:03 PM, you wrote: Hello, We have been evaluating Message Sniffer for the past

[sniffer] Updated - did I forgot anything?

2008-02-04 Thread Hirthe, Alexander
Hello, I updated our sniffer on IMail/Declude to 2.9b. I created I new directory, installed sniffer as a service, modified the global.cfg to call the SNFClient, modified the xml files (license, directories). Anything else? It's running and the ID.date.log.xml is growing :) Is this list

[sniffer] Re: Updated - did I forgot anything?

2008-02-04 Thread Pete McNeil
Hello Alexander, Monday, February 4, 2008, 8:40:44 AM, you wrote: Hello, I updated our sniffer on IMail/Declude to 2.9b. I created I new directory, installed sniffer as a service, modified the global.cfg to call the SNFClient, modified the xml files (license, directories). Anything

[sniffer] Anyone on the list using postfix?

2008-02-04 Thread Pi-Web - Frank Jensen
www.plakatkunst.dk # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch

[sniffer] Re: Anyone on the list using postfix?

2008-02-04 Thread David Fletcher
We are using postfix with amavisd-new/spamassasin on FreeBSD. Haven't touched it in a long time, and I'm up to my eyeballs in other projects right now, so I'm not sure I can be of much help. -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pi

[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pi-Web - Frank Jensen
Plakater f.eks. 149 x 149 = 629 kr Vi kan også lave plakat fra dit digitale foto www.plakatkunst.dk # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL

[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pete McNeil
because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] What happens if SNFServer is not running or crashes?

2008-01-29 Thread Shawn Park
Hello. I am using the latest beta version of Message Sniffer. On your Wiki, it states under: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetails.Peer-Server Topic: Can you briefly explain Peer-Server technology? Next, the client instance will load the rulebase itself

[sniffer] Re: snfilter - linux

2008-01-27 Thread Pete McNeil
look for any errors in your logs that might indicate why the SNFServer stopped. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pi-Web - Frank Jensen
Imponerende, fascinerende og kæmpe Plakater f.eks. 149 x 149 = 629 kr Vi kan også lave plakat fra dit digitale foto www.plakatkunst.dk # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pete McNeil
, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode

[sniffer] New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello Sniffer Folks, We have been researching/refining the default ranges for GBUdb. Here are our latest reference settings. These are conservative for large systems (500/min) and should be even more conservative for smaller systems. Smaller systems that experience lower message rates will tend

[sniffer] Re: GBUdb question

2008-01-22 Thread Pi-Web - Frank Jensen
Hi Rob, You can add the IPs to GBUdbIgnoreList.txt if you want sniffer to ignore the IPs. Pete, I have some questions about GBUdb FIRST QUESTION: I have several clients who forward over e-mails from ISP accounts. I have a system whereby I can pick out the original sending server IP. I

[sniffer] Re: GBUdb question

2008-01-22 Thread Pete McNeil
). Would it be possible for MessageSniffer to grab the IP from a particular header (perhaps this header could be added as a node in the XML config file?). That way, if/when that header is available in the message, Sniffer would then treat *that* IP as the sender's IP? I will consider adding

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread David Waller
Hi, I think I must have missing something or been asleep. I've had a look at the Sniffer site and to be honest I don't fully understand what GBUdb is. I've read the technical details page but I don't see how it fits into the whole scheme of things, if it's useful to me, and if it is, how

[sniffer] Re: GBUdb question

2008-01-22 Thread Rob McEwen
. This was inherited by an antiquated anti-spam utility I used years ago. The X-RegEx-Original-IP part can change at any time. This would even be a header custom designated by Sniffer.) Even better, another option would be for the IP to be passed to sniffer via the command line where sniffer would

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello David, Tuesday, January 22, 2008, 12:43:09 PM, you wrote: Hi, I think I must have missing something or been asleep. I've had a look at the Sniffer site and to be honest I don't fully understand what GBUdb is. I've read the technical details page but I don't see how it fits

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello David, Ooops, I missed a question... Tuesday, January 22, 2008, 12:43:09 PM, you wrote: snip/ ..., how to implement it. GBUdb is built in to the new version of Message Sniffer. It is turned on by default and the default settings work for just about everybody. If you have any email

[sniffer] Re: GBUdb question

2008-01-22 Thread Pete McNeil
. This was inherited by an antiquated anti-spam utility I used years ago. The X-RegEx-Original-IP part can change at any time. This would even be a header custom designated by Sniffer.) That seems straight forward enough. Thanks. Even better, another option would be for the IP to be passed

[sniffer] Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
Hi We trying to setup snf with postfix. It seems to work - except it does not reject ant messages. The x.20080116.log.xml says: s u='20080116110805' m='20080116120805_22626.msg' code='69' error='ERROR_MSG_FILE'/ This I belive is because the msg file that is send to sniffer has a wrong

[sniffer] Re: Postfix

2008-01-16 Thread Pete McNeil
' error='ERROR_MSG_FILE'/ This I belive is because the msg file that is send to sniffer has a wrong format. - If true - how do we setup the right format for sniffer? -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
It seems right - but no go: In /var/spool/snfilter/msg/ -rw--- 1 snfilter snfilter 2965 Jan 16 18:35 20080116183528_10882.msg (deleted after process finished) Result: s u='20080116173528' m='20080116183528_10882.msg' code='69' error='ERROR_MSG_FILE'/ sniffer setup: SNIFFER_EXE=/var

[sniffer] Re: Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
='20080116173528' m='20080116183528_10882.msg' code='69' error='ERROR_MSG_FILE'/ sniffer setup: SNIFFER_EXE=/var/spool/snfilter/SNFClient.exe AUTHENTICATION= INSPECT_DIR=/var/spool/snfilter/msg/ SENDMAIL=/usr/sbin/sendmail -i MSGFILE=`date +%Y%m%d%H%M%S`_$_$RANDOM.msg Hello Pi-Web

[sniffer] Re: Postfix

2008-01-16 Thread Pete McNeil
: s u='20080116173528' m='20080116183528_10882.msg' code='69' error='ERROR_MSG_FILE'/ sniffer setup: SNIFFER_EXE=/var/spool/snfilter/SNFClient.exe AUTHENTICATION= INSPECT_DIR=/var/spool/snfilter/msg/ SENDMAIL=/usr/sbin/sendmail -i MSGFILE=`date +%Y%m%d%H%M%S`_$_$RANDOM.msg

[sniffer] Rule Database copy question

2008-01-16 Thread Shawn Park
Hello, I am using the latest beta version of Message Sniffer. I am asking this question because I thought I read this somewhere but I can not find where I read it. If I copy my rule database file to the c:\snf directory while SNFServer.exeis running, does SNFServer automatically load the new

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Pete McNeil
Hello Shawn, Wednesday, January 16, 2008, 2:26:14 PM, you wrote: Hello, I am using the latest beta version of Message Sniffer. I am asking this question because I thought I read this somewhere but I can not find where I read it. If I copy my rule database file to the c:\snf

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Colbeck, Andrew
It appears that both the reload and the rotate options in the sniffer executable are still accepted by SNFClient.exe but are deprecated, as neither parameter appears in the help or in the contextual help when SNFClient.exe is run without parameters. Andrew

[sniffer] ERROR_SYNC_FAILED

2008-01-16 Thread Shawn Park
Hello, I am using the latest beta of Message Sniffer. Occasionally in my log file I will see the following entry: e u='20080116022507' context='SNF_NETWORK' code='99' text='ERROR_SYNC_FAILED'/ What causes this and how do I correct it? Thanks, Shawn

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Colbeck, Andrew
Thanks for the response, Pete! I was using both parameters in my scheduled pattern download script, which would tell Sniffer that there was a new pattern, and would rotate the logs before uploading them back to you. With the new (beta) version, both extras have become redundant, so I've

[sniffer] Re: ERROR_SYNC_FAILED

2008-01-16 Thread Pete McNeil
base status - Our system sends back information on the latest rulebase file. * GBUdb reflections - Our system sends back GBUdb reflections (same format as above) corresponding to any alerts that your system sends us. This allows your system to learn from the cloud. _M -- Pete McNeil Chief Sc

[sniffer] Re: One line nonsense mail

2008-01-12 Thread Pi-Web - Frank Jensen
# This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL

[sniffer] Re: SNF V2-9b1.5 Released - Please Upgrade

2008-01-12 Thread Harry vanderzand
I do not recall upgrading How can I tell the version that I am running? thanks Harry Vanderzand Intown Internet 11 Belmont Ave. W. Kitchener, ON, N2M 1L2 519-741-1222 -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Saturday

[sniffer] Re: SNF V2-9b1.5 Released - Please Upgrade

2008-01-12 Thread David Moore
. - -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Sunday, 13 January 2008 4:25 AM To: Message Sniffer Community Subject: [sniffer] Re: SNF V2-9b1.5 Released - Please Upgrade Hello Harry, You can run the SNF program

[sniffer] Questions about usage

2008-01-11 Thread Richard Lyon
this folder at their convenience and deal with the email. However, the amount of spam has kept increasing, and we are coming to the point where we will need to start deleting some email above a certain (very high) weight. It looks like the beta of Sniffer is dramatically different than

[sniffer] Sniffer Win32 command line output

2008-01-10 Thread Shawn Park
Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) If I am in a MSDOS Window and I type: SNFClient.exe junkmsg.txt there is a very fast pause and I am returned to the command prompt. I can go into the log and see this: s u='20080110191039' m='junkmsg.txt' s

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pi-Web - Frank Jensen
Make a bat fil like this: -- @echo off echo syntax batfilenavn.bat messagefil to test SNFclient.exe %1 echo %errorlevel% pause -- If it display zero the message is clean. Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) If I am

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
Hello Shawn, Thursday, January 10, 2008, 2:16:24 PM, you wrote: Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) snip/ But how do I get the result code for the spam message to output back to the command prompt? If I try to call

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
S.71).aspx Hope this helps, _M # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL

[sniffer] One line nonsense mail

2008-01-10 Thread Pi-Web - Frank Jensen
Mouth # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Shawn Park
to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Kudos

2008-01-09 Thread Robert Grosshandler
and no complaints of leakage. The suggestion to keep the rule update process the same was a good one. We used FireDaemon instead of srvany to manage the SNF process. Works fine. We use inv-uribl, Declude (and therefore zerohour) in combo with Message Sniffer. I'm thinking of lowering the weight we delete

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
Sniffer InvURIBL 3.7 Two questions: 1) There is a way or tool to recycle back good messages from the temp directory into the queue? You should be able to write a cmd script to test the messages in your temp folder against SNF and place the clean messages back into the spool for delivery

[sniffer] Re: I got a strong attack today

2008-01-04 Thread John T (lists)
is to call it T_date_A and then B and then C and so forth. I then keep a rule_readme.txt file in the spool\declude directory that I update. John T # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pi-Web - Frank Jensen
the services and move all the spool files in a temp directory. I won't use the nobody alias because at least the iMail Access Control can stop some bad IPs. My config is: Imail 9.23 Mxguard 3.1 Message Sniffer InvURIBL 3.7 Two questions: 1) There is a way or tool to recycle back good

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
between 7:00 AM (GMT-0500) and about 8:30 AM. Big chunks were getting through (spam detection rate dropped to about 65-70% (from its normal 97-99%). Sniffer updates seemed to start quelling the attack after about an hour of getting pummeled. Because of the relatively short lifespan

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
keep us posted. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED

[sniffer] The new version of SNF

2007-12-28 Thread Alberto Santoni
Hello The new version of SNF is released? How much is it stable? Thanks Alberto # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED

[sniffer] Re: The new version of SNF

2007-12-28 Thread Pete McNeil
to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread David Moore
) is strictly prohibited. No representation is made that this email or any attachments are free of viruses. Virus scanning is recommended and is the responsibility of the recipient. - From: Message Sniffer Community [mailto:[EMAIL

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread Pi-Web - Frank Jensen
. - *From:* Message Sniffer Community [mailto:[EMAIL PROTECTED] *On Behalf Of *Pete McNeil *Sent:* Friday, 21 December 2007 8:10 AM *To:* Message Sniffer Community *Subject:* [sniffer] Re: Excessive amounts of spam Hello David

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread David Moore
We are using MxGuard, Sniffer, InvURIBL combo on Imail will the beta sniffer still fit with this combination with out issues? Regards David Moore [EMAIL PROTECTED] J.P. MCP, MCSE, MCSE + INTERNET, CNE. www.adsldirect.com.au for ADSL and Internet www.romtech.com.au for PC sales Office Phone

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread John T (lists)
I have not noticed any increase on FPs on the one server that is running it. John T -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 20, 2007 1:29 PM To: Message Sniffer Community Subject: [sniffer] Re

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread Pi-Web - Frank Jensen
We are using sniffer and free tools: yasu (URLBL) and RBLCHECK (DNSBL). URLBL does catch some that sniffer dont. URLBL I think has as low false rate as sniffer - but it does not catch as many as sniffer. DNSBL also (mainly spamcop), but with much more false than sniffer. We have added a IP

[sniffer] Sniffer Update Timeouts

2007-12-12 Thread Christopher Jaime
I'm seeing timeouts and very slow downloads from sniffer today. Is this just me? - Chris -- C:\IMail\Snifferwget -N http://www.sortmonster.net/Sniffer/Updates/user_code.snf -O user_code.new.gz --http-user=sniffer --http-passwd=ki11sp8m

[sniffer] Please send email to r...@bluscs.com

2007-11-29 Thread roconnor
My email address has changed. Please email [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST

[sniffer] Re: [S][sniffer] Re: Please send email to r...@bluscs.com

2007-11-29 Thread David Payer - IowaLink Administrator
: John T (lists) [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Thursday, November 29, 2007 10:00 AM Subject: [S][sniffer] Re: Please send email to [EMAIL PROTECTED] Please do what you are supposed to do and take responsibility to update your own subscription! John T

[sniffer] Re: re subscriptions to list

2007-11-29 Thread Pete McNeil
to time when it escapes us -for whatever reason. Think of how much time we could all save if it were easier to escape those moments. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: re subscriptions to list

2007-11-29 Thread Matt
are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]

[sniffer] REVDNS

2007-11-28 Thread george kulman
Pete, Rulebase Update Notifications from BI.Arm1.armresearch.com [74.205.4.85] are failing Declude's REVDNS. Might a PTR be in order? DNSSTUFF doesn't show one. George

[sniffer] Re: REVDNS

2007-11-28 Thread Herb Guenther
. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Bill Foresman
Thanks, Pete. I was looking for the code I needed to add to the scripts that would automate that? Thanks, Bill Foresman Matrosity Hosting 850-656-2644 -Original Message- From: "Pete McNeil" [EMAIL PROTECTED] Sent 11/23/2007 9:52:45 AM To: "Message Sniffer Com

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Pete McNeil
-then you upload the compressed version. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Bill Foresman
- From: "Pete McNeil" [EMAIL PROTECTED] Sent 11/23/2007 2:34:58 AM To: "Message Sniffer Community" sniffer@sortmonster.com Subject: [sniffer] FTP access to snf rulebase files is no longer available. Hello Sniffer Folks, It has come to our attention that a few folks out there

[sniffer] No email updates.

2007-11-21 Thread Frederick Samarelli
Fred # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX

[sniffer] Re: No email updates.

2007-11-21 Thread Colbeck, Andrew
For what it's worth, it is working for my two licences. I received email update notifications at: 90 minutes ago 3 18 minutes ago 4 38 minutes ago 6 hours 13 minutes ago Andrew 8) -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Frederick

[sniffer] Server didnt restart

2007-11-20 Thread Serge
Hello My server rebooted last night. Sniffer server did not restart correctly. I fixed that, but i have 40K+ message in the imail/spool/proc, most inbound and not yet localy delivered. Will they be reprocessed automaticaly ? or is there something else i need to do ? How long will it take

[sniffer] Re: Server didnt restart

2007-11-20 Thread Paul Rogers
hour inbound rate). At max capacity I see my main server process (through sniffer/latest beta) about 800-1000 messages per minute (60k/hour)...that would be on a quad xeon (on SATA drives). So at that rate (assuming no other incoming email which can slow the overall process down) maybe an hour

[sniffer] AW: [sniffer] Server didnt restart

2007-11-20 Thread Hirthe, Alexander
Hi, I would stop all mailservices (Queuemgr, SMTPD32, Decludeproc) and restart them all. We had over 40 k on Sunday (crashed decludeproc) and it took about 6 hours (dual Xeon 3.0) Alex -Ursprüngliche Nachricht- Von: Message Sniffer Community [mailto:[EMAIL PROTECTED] Im Auftrag

[sniffer] Re: Server didnt restart

2007-11-20 Thread Serge
: Serge [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Wednesday, November 21, 2007 1:57 AM Subject: Re: [sniffer] Server didnt restart Thank you all for your input It took about 9+ hours to process the backlog Server was processing about 125 msg/minute

[sniffer] Re: Was: Database Compiler Upgrades Now: When will the new version be out of beta?

2007-11-16 Thread Serge
PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Friday, November 16, 2007 12:48 AM Subject: [sniffer] Re: Was: Database Compiler Upgrades Now: When will the new version be out of beta? Hello Robert, Sorry, I wasn't really specific enough. Actually interested

[sniffer] Re: Was: Database Compiler Upgrades Now: When will the new version be out of beta?

2007-11-16 Thread Pete McNeil
McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail

[sniffer] Re: Database Compiler Upgrades

2007-11-15 Thread Pete McNeil
McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail

<    2   3   4   5   6   7   8   9   10   11   >