Pete,
Your memory fails you :) I reported one just yesterday, however it was
understandable. The rule is below (slightly obfuscated for public
consumption).
MB Final
MB RULE 349776-055: User Submission, 13 days, 3.1979660500
MB NAME: Account and Password Information are
On Tuesday, May 17, 2005, 6:37:12 PM, Chuck wrote:
CS Can't seem to get a response on a major problem we are having.
Responded off list.
_M
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
On Friday, May 13, 2005, 9:11:15 AM, Hosting wrote:
HS What's going on over there?
HS
HS Our FTP process has been failing since yesterday afternoon,
HS and when I go to the main website it prompts me for an ID and PW.
I'm not seeing a problem - I'm on the site right now in fact, and the
crew
sniffer@SortMonster.com
Sent: Friday, May 13, 2005 9:57 AM
Subject: Re: [sniffer] FTP and web down?
On Friday, May 13, 2005, 9:11:15 AM, Hosting wrote:
HS What's going on over there?
HS
HS Our FTP process has been failing since yesterday afternoon,
HS and when I go to the main website it prompts me
Hello Darin,
working here, maybe your proxy want's authentication?
:)
Alex
From: Hosting Support
[mailto:[EMAIL PROTECTED] Sent: Friday, May 13, 2005 3:11
PMTo: sniffer@SortMonster.comSubject: [sniffer] FTP and
web down?
What's going on over there?
Our FTP
That one was not blocked by my rulebase...?
Regards,
Michiel
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Daniel Bayerdorffer
Sent: vrijdag 13 mei 2005 16:32
To: sniffer@SortMonster.com
Subject: [sniffer] Message Sniffer says Sniffer List is Spam
On Friday, May 13, 2005, 10:31:57 AM, Daniel wrote:
DB Hello,
DB A lot of the email from the Message Sniffer list, gets marked as spam by
DB Message Sniffer! See attached.
That's weird. Can you send me the rule (SNF log snippet) off list at
our support@ address please?
Thanks,
_M
This
McNeil
Sent: Monday, May 09, 2005 6:49 PM
To: Chuck Schick
Subject: Re: [sniffer] False Positives.
On Monday, May 9, 2005, 7:40:00 PM, Chuck wrote:
CS I am all of a sudden having all of the mail from one of our hosted
domains
CS fail the sniffer-phishing. The domain is srinternational.com -
could you
On Tuesday, May 10, 2005, 9:35:59 AM, Frederick wrote:
FS I am finding that most if not all email from Comcast senders are failing
FS Sniffer.
Please submit a false positive report to false@ and include matching
SNF log entries if possible.
Thanks,
_M
This E-Mail came from the Message
Whew! Just got done forwarding 90 false positives to mail clients. Sure
glad you caught it!
Michael Stein
Computer House
- Original Message -
From: Pete McNeil [EMAIL PROTECTED]
To: sniffer@sortmonster.com
Sent: Tuesday, May 10, 2005 10:27 AM
Subject: [sniffer] Rule 353039 -
Thanks for the quick work, Pete.
I put in the Rule-panic entry as soon as you sent the email to this
list.
For what it's worth, I just finished with all my held mail for the last
two days, and I had no false positives from messages with a mailfrom
that included c o m c a s t.
Lots of mail that
Pete,
Is this in the beta/free release of Sniffer rules?
Erik
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Colbeck, Andrew
Sent: Tuesday, May 10, 2005 6:20 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Rule 353039 - .comcast.net
Thanks
Warning!
When you add a RulePanic entry and are running Sniffer in persistent
mode, you have to restart the service for it to take effect. I changed
this earlier and it had no effect until I restarted the service on my
box. Maybe I'm wrong about this, but just changing my config file had
no
Mail from Comcast is still getting caught, even with the panic rule in
place. Any suggestions?
Mike Stein
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html
See my message below...restart your Sniffer service and it should work.
Matt
Computer House Support wrote:
Mail from Comcast is still getting caught, even with the panic rule in
place. Any suggestions?
Mike Stein
This E-Mail came from the Message Sniffer mailing list. For information and
Matt,
Restarting the sniffer service seems to have done the trick. Thank you for
the suggestion!
Michael Stein
Computer House
[EMAIL PROTECTED]
- Original Message -
From: Matt [EMAIL PROTECTED]
To: sniffer@SortMonster.com
Sent: Tuesday, May 10, 2005 12:46 PM
Subject: Re: [sniffer
On Monday, May 9, 2005, 7:40:00 PM, Chuck wrote:
CS I am all of a sudden having all of the mail from one of our hosted domains
CS fail the sniffer-phishing. The domain is srinternational.com - could you
CS please check on this. All of the emails are different - just from the same
CS domain.
On Tuesday, April 26, 2005, 6:25:38 PM, Frederick wrote:
FS Look what I got.
There has been some trouble with my mail server --- attacks and other
technical issues while I was on the road. I'm back now and I'm working
through it. Things _appear_ to be settling down.
Sorry for any confusion.
_M
.
Ah, the joy of being in IT...
Darin.
- Original Message -
From: Pete McNeil [EMAIL PROTECTED]
To: Frederick Samarelli sniffer@SortMonster.com
Sent: Wednesday, April 27, 2005 4:31 PM
Subject: Re: [sniffer] Fw: Undeliverable Mail
On Tuesday, April 26, 2005, 6:25:38 PM, Frederick wrote
On Apr 25, 2005, at 10:46 AM, Jim Matuska wrote:Does anyone know a way I could setup digest style notifications in Mdaemon so that messages copied to users spam folder would be provided notification digest messages letting them know they should check their spam folder if need be? Also is there a
On Sunday, April 24, 2005, 1:52:53 PM, Goran wrote:
GJ Hi,
GJ I think I am having a problem with my Declude log file numbers/stats and
GJ I want to try and figure it out. Last week my Sniffer hit rate went from
GJ SNIFFER6,699...64.78%
GJ To yesterday
GJ
Pete,
Should we change the license info in the plugin.cfg file to match our
license info or should we wait to do so until the release version comes out?
Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
- Original Message -
From: Pete McNeil
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Andy Schmidt
Sent: dinsdag 19 april 2005 5:22
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta Promo
Wow - inline Virus scanning - and if I read the flow chart correctly
Wow - inline Virus scanning - and if I read the flow chart correctly, their
heuristic engine actually sounds like a scoring system for DNSBL and various
other indicators and reject a message during connection.
Now that's the kind of SMTP engine I've been wanting all along.
Best Regards
Andy
Quick update. I found a few false positives (about 1 in 50,000
messages) and as a result I modified things a little and added a few
more checks for supposedly rather unique patterns. The new version is
attached. Unless there is a problem I probably won't update it any
more, but I felt that
On the weekend and since, I saw a lot of them get through but Sniffer
was dutifully catching them, unfortunately, they also served to
highlight Sniffer hyperaccuracy because those messages just weren't
reaching my HOLD weight.
Check out the Message Sniffer change rates for the last few days:
: Colbeck, Andrew [EMAIL PROTECTED]
To: sniffer@SortMonster.com
Sent: Wednesday, April 13, 2005 12:36 PM
Subject: RE: [sniffer] Latest medication campaign
On the weekend and since, I saw a lot of them get through but Sniffer
was dutifully catching them, unfortunately, they also served to
highlight
On Wednesday, April 13, 2005, 1:16:29 PM, John wrote:
JTL I am seeing a lot of these get through
Can you be specific about these ? Please send me a sipped plaintext
or message file. (to [EMAIL PROTECTED])
Thanks,
_M
This E-Mail came from the Message Sniffer mailing list. For information
was failing.
John T
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On
Behalf Of Colbeck, Andrew
Sent: Wednesday, April 13, 2005 10:36 AM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Latest medication campaign
On the weekend and since, I
Attached is something that I coded up last night for this guy. It's
designed to be not totally dependant on one pattern so that it might
have some longevity. His forging of a Microsoft format is quite good,
but he does make mistakes and does leave patterns, some of which can be
tagged with a
I have not had any messages from the list since the 3rd of March. What is
happening on the list?
Rick Hogue
Intent.Net - Web Hosting
3802 Handley Avenue
Louisville, KY 40218
1-502-459-3100
1-800-866-2983 Toll Free
New Books Available
Prosperity Or Better Times Ten
Hot Slot Secrets
The
On Saturday, April 2, 2005, 4:09:31 PM, Jay wrote:
JSHNL Hello -
JSHNL I am reviewing your MDLP report at
JSHNL http://www.sortmonster.com/MDLP/MDLP-Example-Long.html, and find some
JSHNL tests that are seemingly quite effective that I'm not familiar with. If
JSHNL anyone has any informaiton
, April 02, 2005 4:43 PM
To: Jay Sudowski - Handy Networks LLC
Subject: Re: [sniffer] MDLP Tests
On Saturday, April 2, 2005, 4:09:31 PM, Jay wrote:
JSHNL Hello -
JSHNL I am reviewing your MDLP report at
JSHNL http://www.sortmonster.com/MDLP/MDLP-Example-Long.html, and find
JSHNL some tests
Jay, here's more web information on the mxrate tests:
http://www.mxrate.com/lookup/dns.htm
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Saturday, April 02, 2005 1:43 PM
To: Jay Sudowski - Handy Networks LLC
Subject: Re
Keith,
Windows DNS service will handle over a million lookups a day without
blinking. There should be no reason to switch to a different DNS
server. It hardly even registers any CPU load on my boxes. The biggest
CPU hog is the virus scanners, and choosing your virus scanners
carefully will
On Wednesday, March 30, 2005, 4:08:35 PM, Keith wrote:
KJ I noticed in the archives about a .cfg file one can configure for use
KJ when running Persistent sniffer. How do you download it or obtain it?
KJ Thanks for the aid.
You can find a sample .cfg file in the latest distribution. If you
On Monday, March 28, 2005, 2:09:52 PM, Heimir wrote:
HE Anyway that sniffer could trigger on this type of stuff?
snip/
Yes. The bad news is that this stuff is highly variable and so more of
it gets through than we would like. The good news is that we are
developing filters to deal with it by
Just an FYI from my perspective. As things stand, Sniffer false
positives on dirty language is one of the top 5 types of FP's that I see
with Sniffer. It's not a huge problem, but I definitely wouldn't want
to see any more of it. While some companies do not have an issue with
blocking dirty
On Thursday, March 24, 2005, 11:00:56 AM, Scott wrote:
SF A question:
SF
SF If I have the same spam sent to multiple recipients, should
SF I be submitting more than one copy to [EMAIL PROTECTED]
If you mean there are multiple recipients in the SMTP envelope then we
only need one copy.
If
Pete,
Doesnt Sniffer have a certain level of support for regex's? I know we have
had good luck with regex's like this which catch obfuscation techniques with
viagra with Declude. We found it easier to use regex's than to list all of
the different variations.
You truly are a mad scientist - But we love ya! :)
Matt
MaxNett Ltd
T.08701 624 989
F.08701 624 889
www.maxnett.co.uk
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: 23 March 2005 00:37
To: Colbeck, Andrew
Subject: Re: [sniffer] Money
On Tuesday, March 22, 2005, 8:31:07 PM, Andrew wrote:
snip/
CA How many times have we all been frustrated that a piece of spam ending
CA up in *OUR* mailbox that was s close in content to spam we whacked
CA yesterday?
CA I thought the top n obfuscations might be interesting to look at, and
. Hope some people can learn from our pain!
Nick
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: 14 March 2005 19:23
To: Nick Marshall
Subject: Re: [sniffer] Moving Sniffer to Declude/SmarterMail
On Monday, March 14, 2005, 12:47:33 PM
Thanks John - I didn't know that, but it would explain things...
Nick
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of John Tolmachoff (Lists)
Sent: 16 March 2005 14:40
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Moving Sniffer to Declude
John,
It is a well known and published fact (on the Imail list) that RAID5
should
never ever be used for the spool directory or any other directory that
has
a
high write activity. This is basic physics. RAID5 should really only
be
used
for high read activity only, such as databases where
Even if you break it into smaller blocks, you still need to transfer the
data to the controller, then the controller has to employ overhead to break
up the block, create the parity information, determine the location for each
block, etc.
With RAID-1 the controller can just write through and
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: 16. marts 2005 17:43
Writing data to a raid 5 takes x+y+z amount of work where y
is described above and z is calculating a CRC stripe which
must now also be saved to a hard
Uh, sorry, I had thought that discussion was RAID-5 vs. RAID-1?
If someone is running RAID-5, I assume that it's hardware based. If so, then
that person could use the same hardware to configure a RAID-1 array instead
- so why even bother with software RAID then?
If the discussions is software
IMO, Software RAID is not the way to go on a busy machine. You will
save a measurable amount of overhead by going with hardware based RAID
of any sort since the controller should handle the processes associated
with the RAID. Note that this isn't the case with inexpensive RAID
controllers such
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Matt
Sent: Wednesday, March 16, 2005
3:49 PM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] RAID Levels
for Spool Folder
IMO, Software RAID is not the way to go on a busy
machine. You will save a measurable amount
Of Matt
Sent: Wednesday, March
16, 2005
3:49 PM
To:
sniffer@SortMonster.com
Subject: Re: [sniffer]
RAID Levels
for Spool Folder
IMO, Software RAID is not the
way to go on a busy
machine. You will save a measurable amount of overhead by going with
hardware based RAID of any sort since
Hi there
I was contacted off-list this morning by another user with the same question
- below is my reply - we moved just a few days ago from iMail to
SmarterMail. Hope it helps...
---
We too have been looking for an alternative to iMail for a couple of years
Hi Steve,
You wrote:
We are going to be moving to another mail package (you know why)...
I would very much like to hear your comments about Imail and any
difficulties you've encountered and why you feel the need to switch. You
can write to me offline if you'd prefer.
Thank you,
Michael
If possible I'm interessed in this discussion me too
Thank you
Alberto
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Computer House Support
Sent: mardi 15 mars 2005 17:20
To: sniffer@SortMonster.com
Subject: Re: [sniffer] Smartermail
Hi Steve,
You
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Computer
House Support
Sent: Tuesday, March 15, 2005 8:20 AM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] Smartermail
Hi Steve,
You wrote:
We are going to be moving to another mail package (you know why
On Tuesday, March 15, 2005, 1:36:31 PM, Rick wrote:
RH All of a sudden today Sniffer has started taking emails sent between users
RH within a single domain and putting them in our hold system. Any ideas why
RH this might happen and also how I can add a rule so that does not become a
RH problem on
Of Computer House
Support
Sent: Tuesday, March 15, 2005 8:20 AM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] Smartermail
Hi Steve,
You wrote:
We are going to be moving to another mail package (you know why)...
I would very much like to hear your comments about Imail and any
difficulties
On Monday, March 14, 2005, 12:47:33 PM, Nick wrote:
NM Hi there
NM We've just undergone a migration of a 1,000 domain iMail server to
NM SmarterMail (for obvious reasons!), and using Declude and Sniffer on the new
NM system.
NM However, occasionally we see Sniffer jumping out of its perpetual
On Thursday, March 10, 2005, 9:45:11 AM, Mike wrote:
MW When I send messages to the [EMAIL PROTECTED] Can I send these as
attachments. I
MW use outlook and SpamSource http://www.daesoft.com to send to both spamcop
MW and sortmonster. I think you said at one time they had to be individual
MW
On Monday, March 7, 2005, 3:13:40 PM, Phillip wrote:
PC I have been running the demo version of sniffer for about a month or so to
PC try it out before we buy it and have a few questions.
PC 1. Right now all of the spam is going into a directory called spam, since I
PC am getting about 12,000
Phillip Cohen wrote:
1. Right now all of the spam is going into a directory called spam,
since I
am getting about 12,000 spams a day being filtered I might as well
just
have it delete everything and save the disk drive, as there is no way
to
easily find an email that has been filtered. Is
At 06:40 PM 3/7/2005 -0500, Frederick Samarelli wrote:
I am seeing a large amount of SPAM Pass Sniffer today.
Am I alone.
Actually mine seems to have had somewhat less bleed through then usual
over the last couple of days.
--
Kirk Mitchell-General Manager[EMAIL PROTECTED]
Keystone
On Monday, March 7, 2005, 6:40:52 PM, Frederick wrote:
FS I am seeing a large amount of SPAM Pass Sniffer today.
FS Am I alone.
I didn't see this. According to MDLP the first half of the day (at
least) was right in the normal range - about 98.5% of spam captured.
No errors. Just SPAM showing as clean.
- Original Message -
From: Pete McNeil [EMAIL PROTECTED]
To: Frederick Samarelli sniffer@SortMonster.com
Sent: Monday, March 07, 2005 6:56 PM
Subject: Re: [sniffer] SPAM
On Monday, March 7, 2005, 6:40:52 PM, Frederick wrote:
FS I am seeing a large
http://www.sortmonster.com/MessageSniffer/Performance/ChangeRates.jsp
Oooh, pretty!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Sunday, February 20, 2005 3:52 PM
To: sniffer@sortmonster.com
Subject: [sniffer] New change rates
Title: Message
Yup,
just type the executable's filename in a command window, and the version
information is on the last couple of lines in the resulting
help.
Andrew
8)
p.s.
My version says build - v2-3.2 Nov 23 2004 01:21:33
-Original Message-From: Keith Johnson
On Saturday, February 19, 2005, 11:19:32 AM, Keith wrote:
KJ Is there a easy way to determine the Sniffer version you are
KJ running (i.e. command line or the like)? Thanks for the aid.
If you run the SNF executable on the command line by itself it will
tell you the version and build
On Saturday, February 19, 2005, 1:28:14 PM, Dave wrote:
DK I am all in favor of a SUPPORT list to announce timely
DK notifications of problems. solutions and/or changes to your
DK product or services. However, the threads Ive been seeing here
DK lately are 'iMail' specific or involve theoretical
Pete,
Being guilty of being 'chatty' myself, I still second this idea. I
would much prefer to pick through an occasional message dealling with
global announcements regarding the service than picking through both
discussions as well as announcements. I'm not always up to date on this
list and
On Friday, February 18, 2005, 12:43:14 PM, Computer wrote:
CHS Hi Sniffer Folks,
CHS
CHS Here's an interesting article:
CHS http://www.technewsworld.com/story/39578.html
I think this is a rehash of a story that showed up a few weeks ago.
One of the advantages of SNF is that it doesn't use
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Friday, February 18, 2005 01:14 PM
To: Computer House Support
Subject: Re: [sniffer] Interesting Article
On Friday, February 18, 2005, 12:43:14 PM, Computer wrote:
CHS Hi Sniffer Folks,
CHS
CHS Here's
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Matt
Sent: Friday, February 18, 2005 07:23 PM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] IIS SMTP Integration
Sanford Whiteman wrote:
Incidentally, it is a transport sink, not a protocol sink, meaning
that envelope
I guess you essentially got my point and what appears to be Sandy's.
Once you take an Exchange server (or any other server) and insert such
a gateway, you loose your ability to do address validation. Nowadays
this is vital due to real world circumstances as you have yourself
experienced. If
-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Friday, February 18, 2005 10:33 PM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] IIS SMTP Integration
I guess you essentially got my point and what
Sent: Friday, February 18, 2005 07:23 PM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] IIS SMTP Integration
Sanford Whiteman wrote:
Incidentally, it is a transport sink, not a protocol sink, meaning
that envelope rejection is not possible. I can't defend this as solely
a choice
Hello,
Can you please remove me from your mail list. My address is [EMAIL PROTECTED]
and [EMAIL PROTECTED] Thanks!
Ron
Quoting Matt [EMAIL PROTECTED]:
I guess you essentially got my point and what appears to be Sandy's.
Once you take an Exchange server (or any other server) and insert such
Pete McNeil wrote:
Hello sniffer,
Will anyone who is not still alive please raise your hand
anyone?
All joking aside: We are finished with all of the heavy parts of our
move now and as far as I can tell everything important is working as
it should.
Please let us know how we did.
If I may suggest:
- at least 24 hours before the cut-over, change DNS timeout for A and
CNAME records to 4 hours.
- on the day of the cutover, change DNS timeouts to 1 hour
That will minimize any impact.
- after the cutover was successful, change DNS timeouts for the updated
records to longer
On Thursday, February 10, 2005, 12:35:24 PM, Marc wrote:
MC Is it just me or are all the lists (Imail, Declude V and JM and this one
MC offline??)
It's just you :-)
It's just quiet.
_M
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription
The MS04-35 reissue some how slipped under the radar yesterday of the other
patches.. So far no public exploits for that. However, SANS is indicating
POC code has been released for MS05-05/09.
So far for the cycle I patched one LOW volume production mail server and one
standby server. Both
PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, February 10, 2005 10:49 AM
To: sniffer@SortMonster.com
Subject: Re: [sniffer] OT - Microsoft Patch Day - Exchange and SMTP
updates
The MS04-35 reissue some how slipped under the radar yesterday of the
other
patches.. So far no public
On Tuesday, February 8, 2005, 3:20:25 PM, Bill wrote:
BGdS I have started seeing this line repeated in the persistent sniffer command
BGdS window.
BGdS ERROR_LOGFILE: Bad Lock During Logging
BGdS c:\imail\declude\sniffer\mycode.log
BGdS It looks like the error has been happening once a day for
The item that works for this is Decludes HiJack.
http://www.declude.com/SearchResults.asp?Cat=10
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Shaun Sturby, MCSE Optrics Engineering
Sent: Thursday, February 03, 2005 10:09 AM
To:
On Thursday, February 3, 2005, 10:24:31 PM, William wrote:
WVH Pete,
WVH Do you have a list of IP addresses or networks that I can whitelist in my
WVH anti-spam filters for any messages that may originate from you or the
WVH mailing list regarding Sniffer/SortMonster?
You should be safe by
And committing the sin of replying to myself,
I'll post the cf and pm file since it looks like the list ate my formatting.
http://arcadium.org/millisa/snfilter.pm
http://arcadium.org/millisa/snfilter.cf
-Aaron
-Original Message-
From: Aaron Millis [mailto:[EMAIL PROTECTED]
Sent:
not here
Herb
Chuck Schick wrote:
Anyone else seeing this?
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
--
Herb
On Wednesday, February 2, 2005, 3:09:27 PM, Chuck wrote:
CS Anyone else seeing this?
Be sure to submit them.
_M
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html
I have been.
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Wednesday, February 02, 2005 2:01 PM
To: Chuck Schick
Subject: Re: [sniffer] A lot of Porn Spam getting through
im seeing the same, been reporting for a while.
heimir
Chuck Schick wrote:
Anyone else seeing this?
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
in the IMail archive and/or the
IMail knowledge base.
Bill
-Original Message-
From: Glenn Ratliff [mailto:[EMAIL PROTECTED]
Sent: Saturday, January 29, 2005 6:15 PM
To: 'sniffer@SortMonster.com'
Subject: RE: [sniffer] Spam Storm Alert...
This is question is a little off subject, but do you
Hmmm, a day and a half later this shows up on the list...???
Bill
-Original Message-
From: Landry William
Sent: Saturday, January 29, 2005 6:51 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam Storm Alert...
My only suggestion for QM is to disable DNS Cache and Failed Domain
31, 2005 9:19 AM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam Storm Alert...
Hmmm, a day and a half later this shows up on the list...???
Bill
-Original Message-
From: Landry William
Sent: Saturday, January 29, 2005 6:51 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam
On Sunday, January 30, 2005, 1:46:49 AM, Chuck wrote:
CS Unable to connect to sortmonster for updates. Please let me know if it is
CS us or is something wrong.
We had a pair of switches go down. It's been fixed now and should be
ok. I just got back from the fix.
Best,
_M
This E-Mail
On Sunday, January 30, 2005, 1:52:34 AM, Chuck wrote:
CS Just tried routing through 2 other backbones. The updates are not
CS responding.
Sorry for the trouble.
_M
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
Pete:
No problem. just wanted you to be aware there was an issue.
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Sunday, January 30, 2005 1:32 AM
To: Chuck Schick
Subject: Re
This is question is a little off subject, but do you have any
recommendations for Imail queue manager settings? We are running Sniffer
with declude 1.82 under Imail 8.15 and the server seems to bog down
sometimes.
Thanks,
Glenn
--
From: Pete McNeil[SMTP:[EMAIL PROTECTED]
On Monday, January 24, 2005, 4:35:29 AM, Bonno wrote:
BB Hi,
BB
BB When I started using sniffer, April 2004, uploading the log
BB took about 20 seconds. Then on June 19th 2004 it suddenly took
BB over 13 minutes. After that it has consistently taken arround 13
BB minutes to upload the small
That is odd... I didn't believe it at first, but I looked in my
deleted box and sure enough I don't see any new mail from there in a
while.
I don't think anything's going on... though it is an odd silence.
Maybe just the weekend + the show/ice.
_M
On Monday, January 24, 2005, 12:31:33 PM,
Richard,
Apart from business as normal and a whole pile of snow outside the office
nothing has changed. People continue to buy our software and ask for support
(thru the support system) and there hasn't been any conversations on the
Mail Lists.
This happens now and again and in fact there hasn't
For what it's worth, I'm definitely seeing an increase in volume over
the weekend (double the spam, actually), and I believing it is tapering
off already.
In addition to the volume of separate messages, the number of recipients
is generally up.
The messages look generally like the kind of jobs
401 - 500 of 1018 matches
Mail list logo
