[sniffer] Message Sniffer question

2009-04-21 Thread Scott Fisher
If I remember correctly. I have an email account with a Imail program alias, that when it gets a mail from Message Sniffer triggers an update. It's still getting mail and triggering updates. I'm thinking this isn't need with Sniffer v3 anymore? Scott Fisher | IT Director FARM PROGRESS

Re: [sniffer]A design question - how many DNS based tests?

2006-06-06 Thread Scott Fisher
I use about 100 dnsbl/rbl/rhsbl list of varying weights and reliabilities. How many matter... I'd have to say the shining star is CBL. Hits 45% of the spam with a very low false positive rate. The relay RBLs days are way behind them, The proxy RBLs most useful days are behind them The DUL RBLs

Re: [sniffer] Sniffer, MDLP, and invURIBL?

2006-02-25 Thread Scott Fisher
the %WEIGHT% passes the current message weight from Declude to INVURIBL. Used with SKIPWEIGHT option in invuribl.exe.config the %REMOTEIP% passes the sender's IP from Declude to INVURIBL. Used to whitelist IPs in senderipwhitelist.txt invuribl will find false positives, but is a very

Re: Re[2]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Scott Fisher
I like this idea more than the email notification. I really don't need more emails. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Tuesday, February 21, 2006 10:16 AM Subject: RE: Re[2]: [sniffer] False Positive - no reaction? Hi Pete,

Re: [sniffer] Rash of false positives

2005-11-08 Thread Scott Fisher
I don't know if I would call it a rash, but over the last week, I've submitted about 30 false positives. That's far more than average. I've developed a feeling that Message Sniffer has become "too tight". - Original Message - From: Darin Cox To: sniffer@SortMonster.com

Re: [sniffer] Version 3.05.10

2005-10-21 Thread Scott Fisher
web site has 3.0.5.11 - Original Message - From: Robert Grosshandler [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Friday, October 21, 2005 3:00 PM Subject: [sniffer] Version 3.05.10 Are there release notes for this somewhere? What changed between .09 and .10? Do I need to

Re: Re[2]: [sniffer] Large amounts of spam still getting through

2005-10-15 Thread Scott Fisher
I just assumed it was a defective spamming software. - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Saturday, October 15, 2005 2:10 PM Subject: RE: Re[2]: [sniffer] Large amounts of spam still getting through I wonder is that is some

Re: [sniffer] auto update tmp files

2005-09-19 Thread Scott Fisher
I dump them once a day. - Original Message - From: Bonno Bloksma To: sniffer@SortMonster.com Sent: Monday, September 19, 2005 8:21 AM Subject: [sniffer] auto update tmp files Hi, Ok, I had auto update pretty much in the air. Seems all I needed

Re: [sniffer] Spam blocks loading me up with spam

2005-06-17 Thread Scott Fisher
---Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Scott

[sniffer] Spam Submissions - same spam

2005-03-24 Thread Scott Fisher
A question: If I have the same spam sent to multiple recipients, should I be submitting more than one copy to [EMAIL PROTECTED]?

Re: [sniffer] My issues with the General category, looking forabettersolution

2004-12-17 Thread Scott Fisher
I would tend to agree with you that these are false positives. Eweek, Infoworld, Birthday Express, Best Buy, Chadwicks cause regular spam tagging here. If it is a company I've heard of and the links and such point back to that company, I usually give it the benefit of the doubt. -

Re: Re[2]: [sniffer] Version 2-3.1 Official Release

2004-10-28 Thread Scott Fisher
Does the cfg file need to be renamed with your license id also? - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Sent: Thursday, October 28, 2004 4:13 PM Subject: Re[2]: [sniffer] Version 2-3.1 Official Release On Thursday, October 28,

Re: [sniffer] Today

2004-09-22 Thread Scott Fisher
I think Sniffer is finding the bulk of the new spam's here. For people like me that require two or more test hits to get to a hold weight, the other DNSBL tests are definitely lagging. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Jorge Asch [EMAIL PROTECTED] Sent:

[sniffer] Stock obfuscation question

2004-08-25 Thread Scott Fisher
Are there any rules in place to deal with this obfuscation? Sec. tion 2. 7, A o, f the Sec, urities A, ct of 19. 33 and Se.ction 2. 1B of the Se. curities Excha. nge A, ct of 19. 34. Scott Fisher Director of IT Farm Progress Companies This E-Mail came from the Message Sniffer mailing list

Re: Re[4]: [sniffer] Charset

2004-08-20 Thread Scott Fisher
-Mad, How set up is Message Sniffer to determine if an e-mail in a foreign language is spam and then code for it. I dutifully submit my Spanish spam to the spam at sortmonster.com address. It's a very, very small percentage of my overall spam, but it consistently lands in my battleground

Re: Re[2]: [sniffer] Charset

2004-08-20 Thread Scott Fisher
We don't want any violent Mad Scientists! [EMAIL PROTECTED] 8/20 11:59a On Friday, August 20, 2004, 11:20:44 AM, Vivek wrote: VK On Aug 20, 2004, at 10:36 AM, Jorge Asch wrote: Well, since 100% of my users speak english/spanish I can safely bet that NONE of my mail should have strange

Re: Re[2]: [sniffer] Charset

2004-08-19 Thread Scott Fisher
I'll chime in on the subject too. I've finally managed to get the spam in Chinese under control on my system, but for a while I really wished Message Sniffer has language based filters. I.e. Result 40 Chinese Result 41 Cyrillic Result 42 Spanish Result 43 Germain We could then turn on or off

Re: [sniffer] Declude configuration

2004-06-14 Thread Scott Fisher
\Declude\Sniffer\sniffer2.exe code 90 0 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 06/14/04 11:14AM I am new to Sniffer, and have it up and running with the basic line looking for a nonzero return code. I would now like to start setting different weights for different

[sniffer] automate sniffer updates

2004-06-11 Thread Scott Fisher
I'd like to automate the sniffer updates. I currently run scheduled updates, but if I could update upon e-mail notification, my spam window would be closed a little bit more. Has anyone had any luck doing these? Scott Fisher Director of IT Farm Progress Companies This E-Mail came from

Re: [sniffer] Possible blip?

2004-05-21 Thread Scott Fisher
Spams might also be kept longer. I noticed an increase in the Stock spams this week. 2. I've been tracking different character sets for a couple of weeks, the Chinese, Cyrillic and Korean look promising. I get false hits on Greek, Thai, and Vietnamese Headers. Scott Fisher Director of IT Farm

Re: [sniffer] Possible blip?

2004-05-21 Thread Scott Fisher
Interesting. Are you searching for 2 character pairs with GB2312? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/21/04 01:46PM Scott, Regarding my Cyrillic and Chinese filters, I did a review of a full week's held spam, looking for foreign languages and patterns

Re: [sniffer] OT: Language filtering in Declude, wasPossibleblip?

2004-05-21 Thread Scott Fisher
Wouldn't it be better to reverse the order? Run the subject and header tests on the majority of the mail. Then run the body with a TESTSFAILED END NOTCONTAINS CHINESE. You should end up with less body searches this way. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05