[sniffer] Tanx / Bagle.b

2004-02-17 Thread Madscientist
Hello folks,

The new worm Tanx / Bagle.b seems to be spreading quickly.
We have added a rule to Sniffer for this and we are currently pushing it 
out to all rulebases.

Thanks,
_M
Pete McNeil (Madscientist)
President, MicroNeil Research Corporation.
Chief SortMonster, www.SortMonster.com.
Vox 703-406-2016, Fax 703-406-2017
This E-Mail came from the [EMAIL PROTECTED] mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html


Re: [sniffer] Referrals page.

2004-02-17 Thread David Gregg
Pete,

We interface with your product very well. Please consider adding our
*mxGuard for IMail* website to your list:

http://www.mxguard.com/postmaster

Regards,

David Gregg
dgSoft Internet Services
+1.949.584-1514

---
mxGuard for IMail
Server based spam and virus protection for under $100
Request a free trial at http://www.mxGuard.com/postmaster
---

- Original Message - 
From: Madscientist [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, February 17, 2004 9:11 AM
Subject: [sniffer] Referrals page.


 Our referrals page is up and running.

 http://www.sortmonster.com/MessageSniffer/Referrals.html

 Thanks,
 _M


 Pete McNeil (Madscientist)
 President, MicroNeil Research Corporation.
 Chief SortMonster, www.SortMonster.com.
 Vox 703-406-2016, Fax 703-406-2017

 This E-Mail came from the [EMAIL PROTECTED] mailing list. For
information and (un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the [EMAIL PROTECTED] mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


[sniffer] rule idea

2004-02-17 Thread Herb Guenther
At one time we had floated the idea of a rule that would mark any email 
that was more than 24-48 hrs ahead or behind the actual current time and 
date as spam.  I just got two You've been invited to a blind date 
messages that were dated last summer.  99.9% of these off date messages 
are spam, and anyone real who has there date that far off should fix it.

Would it be hard to add such a rule to sniffer?

Herb

--
Herb Guenther
Lanex, LLC
(262)789-0966x102 Office
(262)780-0424 Direct
This e-mail is confidential and is for the use of the intended recipient(s) only.  If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way.  

This E-Mail came from the [EMAIL PROTECTED] mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html


Re: [sniffer] rule idea

2004-02-17 Thread Matt
Please don't, my Grandmother probably couldn't get through then :)

The more solid the basis for the rules, the higher the score I can give 
to the test.  Most spammers nowadays will have a time that is only off 
by a few hours when they hard code the headers for a zombie attack, 
however once you start getting out several days, or even months or 
years, the likelihood that this is not spam increases.  There's no good 
rule of thumb IMO.

Scott from Declude has been testing this idea out for several months now 
without releasing the functionality to the public, probably because it's 
unreliable I'm thinking.  It it was to be scored, I would much rather it 
be separate from other tests.

Matt



Herb Guenther wrote:

At one time we had floated the idea of a rule that would mark any 
email that was more than 24-48 hrs ahead or behind the actual current 
time and date as spam.  I just got two You've been invited to a blind 
date messages that were dated last summer.  99.9% of these off date 
messages are spam, and anyone real who has there date that far off 
should fix it.

Would it be hard to add such a rule to sniffer?

Herb

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
This E-Mail came from the [EMAIL PROTECTED] mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html


Re: [sniffer] Referrals page.

2004-02-17 Thread Madscientist
Now I understand.
Certainly - we will add the referral link.
Thanks!
_M
At 02:56 PM 2/17/2004, you wrote:
In that case, I should rephrase my request:

In addition to our software product for IMail, we also offer email services
to individuals and businesses.
http://www.mxguard.com/individual
http://www.mxguard.com/organization
We currently describe how the service works at:
http://www.mxguard.com/individual/how_it_works.asp
There is a blurb about Sniffer at the bottom of the page (that I just
noticed needs an image and a link to you).
Maybe you can link to these pages?


 You guys are already linked through our Installation pages - you have a
 page to your selves in fact :-)

 http://www.sortmonster.com/MessageSniffer/Installation/IMail-mxGuard.html

 The referrals page is for links to service/product providers who use and
 reference Sniffer.

 Hope this helps,
 _M

 At 12:30 PM 2/17/2004, you wrote:
 Pete,
 
 We interface with your product very well. Please consider adding our
 *mxGuard for IMail* website to your list:
 
  http://www.mxguard.com/postmaster
 
 Regards,
 
 David Gregg
 dgSoft Internet Services
 +1.949.584-1514
 
 ---
 mxGuard for IMail
 Server based spam and virus protection for under $100
 Request a free trial at http://www.mxGuard.com/postmaster
 ---
 
 - Original Message -
 From: Madscientist [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, February 17, 2004 9:11 AM
 Subject: [sniffer] Referrals page.
 
 
   Our referrals page is up and running.
  
   http://www.sortmonster.com/MessageSniffer/Referrals.html
  
   Thanks,
   _M
  
  
   Pete McNeil (Madscientist)
   President, MicroNeil Research Corporation.
   Chief SortMonster, www.SortMonster.com.
   Vox 703-406-2016, Fax 703-406-2017
  
   This E-Mail came from the [EMAIL PROTECTED] mailing list. For
 information and (un)subscription instructions go to
 http://www.sortmonster.com/MessageSniffer/Help/Help.html
  
 
 This E-Mail came from the [EMAIL PROTECTED] mailing list. For
 information and (un)subscription instructions go to
 http://www.sortmonster.com/MessageSniffer/Help/Help.html

 Pete McNeil (Madscientist)
 President, MicroNeil Research Corporation.
 Chief SortMonster, www.SortMonster.com.
 Vox 703-406-2016, Fax 703-406-2017

 This E-Mail came from the [EMAIL PROTECTED] mailing list. For
information and (un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html

This E-Mail came from the [EMAIL PROTECTED] mailing list. For 
information and (un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html
Pete McNeil (Madscientist)
President, MicroNeil Research Corporation.
Chief SortMonster, www.SortMonster.com.
Vox 703-406-2016, Fax 703-406-2017
This E-Mail came from the [EMAIL PROTECTED] mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html