Re: [sniffer] Sniffer seems to be causing false positives.

2005-01-20 Thread Pete McNeil
On Wednesday, January 19, 2005, 8:00:41 PM, Chuck wrote: CS It appears that emails from statefarm.com are all being failed by CS SNIFFER-OBFUSCATION code 61. It appears from multiple senders and to CS multiple recipient domains. Any thoughts?? Update. I've just removed a rule that matches

Re: [sniffer] Still having problems

2005-01-10 Thread Matt
I just wanted to add some stats that I thought might be of some use here. I gathered info on my block rates over the past three days and compared my Sniffer hits to them. There has been no measurable change to my system with an average of 96% of spam getting tagged by Sniffer. I'm at least not

Re: [sniffer] Sniffer and SURBL

2005-01-10 Thread Pete McNeil
On Monday, January 10, 2005, 3:05:18 PM, Phillip wrote: PC How do you use both Sniffer and SURBL together? What else is required. On most platforms SNF is integrated through, or in front of other anti-spam / anti-virus software. For example, SNF is frequently placed in front of SpamAssassin, or

Re: [sniffer] Still having problems

2005-01-08 Thread Pete McNeil
On Saturday, January 8, 2005, 7:47:14 AM, Kirk wrote: KM I'm still getting a ton of spam that, theoretically, I shouldn't be KM seeing. Stuff such as Tadalafil Soft Tabs ads that are identical to KM samples I've forwarded to [EMAIL PROTECTED] multiple times in the last KM week, yet are still

Re: [sniffer] Still having problems

2005-01-08 Thread Kirk Mitchell
Is there any tool available with which to analyze sniffer logs to get any kind of count on the number of hits, etc? -- Kirk Mitchell-General Manager[EMAIL PROTECTED] Keystone Connect Unlock Your World Altoona, PA 814-941-5000 http://www.keyconn.net This E-Mail came

Re: [sniffer] Vircom Vopmail and Sniffer

2005-01-07 Thread Pete McNeil
On Friday, January 7, 2005, 12:55:34 AM, Phillip wrote: PC Is there anything special I need to do to get sniffer to work with VopMail? PC I have everything in the way it is supposed to be but seems like it doesn't PC do anything. No mail is being put into the spam directory. I am using the PC

Re: [sniffer] Vircom Vopmail and Sniffer

2005-01-07 Thread Phillip Cohen
Pete, It does run from the command line, creates the log file. I didn't give it a file to check so it gave and error so at least it does something. For some reason it won't run the sniffer program from the batch file. I put in a pause and ran it, it is returning an error code of 65 with no file

Re: [sniffer] OT - exchange 5.5 help

2005-01-07 Thread Tom Baker | Netsmith Inc
Title: Re: [sniffer] OT - exchange 5.5 help Configure the IMS (internet mail service/connector in echange manager) You have to disable the microsoft smtp server (iis5 smtp) exchange 55 has its own smtp -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED

Re: [sniffer] Tweaking our rule base

2005-01-06 Thread Matt
If this person is using Declude, Mdaemon or SpamAssassin, they might want to consider just using the blackholes.us zones that list every known IP delegated to certain countries that are known to have spam problems (in addition to some providers as well). This stuff can be set up as a simple

Re: [sniffer] RuleBase ktk82hrr

2005-01-05 Thread Heimir Eidskrem
Something is not right with my rulebase I think. I went from 11mb to 23mb then down to 5mb. Is that right? H. Pete McNeil wrote: On Wednesday, January 5, 2005, 1:22:29 AM, Landry wrote: LW Yep, just checked mine rulebase too, went from 17mb to just under 25mb. LW Things still appear to be

Re: [sniffer] RuleBase size

2005-01-05 Thread Pete McNeil
On Wednesday, January 5, 2005, 10:55:35 AM, MCSE wrote: SSMOE Just wanted to chime in here that the original changes seem to have helped SSMOE my rulebase as it has gone down from 11,355,504 bytes to 4,871,976 bytes but SSMOE I believe I'm still at the 'standard' rulebase strength. This is

Re: [sniffer] reporting spam in bulk

2005-01-05 Thread Matt
Pete, I've been meaning to add a link to a script from within Killer WebMail that will allow me to report things to you with a single click. If I do this, am I correct in assuming that I should just use something like CDONTS to construct a mail and place the original source as the body? If

RE: [sniffer] Weak rule removal work...

2005-01-04 Thread Landry William
Thanks Pete, these are the kind of proactive notification I wish some of our other vendors followed. Bill -Original Message- From: Pete McNeil [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 04, 2005 1:35 PM To: sniffer@SortMonster.com Subject: [sniffer] Weak rule removal work...

RE: [sniffer] new spam storm?

2005-01-04 Thread Rick Robeson
I've sure been seeing it. My db updates are triggered off email update notices from sniffer, so I know I have the latest. Feels like something's gone wrong with sniffer due to the year change. Rick Robeson getlocalnews.com [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message-

RE: [sniffer] new spam storm?

2005-01-04 Thread Andy Schmidt
many of them for ... my cheating wife. Sorry to hear about your marital problems. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kirk Mitchell Sent: Tuesday, January 04, 2005 05:56 PM To: sniffer@SortMonster.com Subject: [sniffer] new spam storm?

Re: [sniffer] new spam storm?

2005-01-04 Thread Matt
I've noted that dictionary attack type spam is generally of this variety, and while you are probably blocking a great deal of this, the sheer volume makes it look like you aren't doing that well against it. I've also noted that the domains that they use are frequently changed, thus escaping

RE: [sniffer] new spam storm?

2005-01-04 Thread Kirk Mitchell
At 06:03 PM 1/4/2005 -0500, Andy Schmidt wrote: many of them for ... my cheating wife. Sorry to hear about your marital problems. LOL! Apparently the tramp's been sleeping all over, and there are plenty of websites that can show me how, where, when, and with whom. Darned if I know when she's

Re: [sniffer] RuleBase ktk82hrr

2005-01-04 Thread Computer House Support
Correction, make that 23 meg! Mike - Original Message - From: Computer House Support [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Wednesday, January 05, 2005 12:33 AM Subject: [sniffer] RuleBase ktk82hrr Dear Pete, Our rulebase file grew from 11 meg to 17.5 meg since the

RE: [sniffer] Sniffer Notifications now failing declude spamheaders test

2005-01-03 Thread Chuck Schick
Title: Message It appears that all mail is failing spamheaders. You should quit using the spam headers test until declude fixes the bug. Discussion of this is on the declude lits. Chuck SchickWarp 8, Inc.(303)-421-5140www.warp8.com -Original Message-From: [EMAIL

Re: [sniffer] Sniffer Notifications now failing declude spamheaderstest

2005-01-03 Thread Matt
Jim, See the Declude list, it is a Declude problem In short, turn off SPAMHEADERS by commenting out the test. It has a bug with 2005 years in the date header. They should be coming out with a fix shortly. Matt Jim Matuska wrote: Has anything changed recently in the format of

Re: [sniffer] Sniffer Notifications now failing declude spamheaders test

2005-01-03 Thread Jim Matuska
Another update too, it looks like the sniffer mailing list messages are failing spamheaders as well. Jim Matuska Jr.Computer Tech2, CCNANez Perce TribeInformation Systems[EMAIL PROTECTED] - Original Message - From: Jim Matuska To: sniffer@SortMonster.com Sent:

Re: [sniffer] Sniffer Notifications now failing declude spamheaders test

2005-01-03 Thread Pete McNeil
On Monday, January 3, 2005, 11:02:17 AM, Jim wrote: JM Has anything changed recently in the format of the sniffer JM notification messages?  I am noticing all the notifications for JM the last few days have been failing decludes spamheaders test, JM this hasn't happened before. The update

RE: [sniffer] Sniffer Notifications now failing declude spamheaders test

2005-01-03 Thread Barry@Declude
There is an issue with one of our spam tests in Declude JunkMail (the SPAMHEADERS test) where it will cause the test to be triggered on most E-mails sent after the year 2004. Fortunately, the SPAMHEADERS test is a minor test, which has a default weight of just 15% of what we recommend

RE: [sniffer] Hello - New to sniffer

2004-12-30 Thread Landry William
Bennie, I will send you my updated scripts and a couple of necessary open-source utilities off-list (hopefully you can receive zipped executable files - let me know if you don't receive my off-list message). Also, as Pete mentioned, we have had some discussion on the list the past couple of days

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread John Tolmachoff (Lists)
] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, December 29, 2004 12:23 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Triggered rulebase update instructions Were might the wget and gzip files be? John Tolmachoff Engineer/Consultant/Owner eServices

Re: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread Matt
Since Pete replied to Bill's response and he also modified his stance on one item, I figured I would just piece my thoughts below. Pete McNeil wrote: On Wednesday, December 29, 2004, 2:31:18 AM, Landry wrote: snip/ MB 2) I personally find it to be a bit messy to have everything MB running

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread John Tolmachoff (Lists)
To: sniffer@SortMonster.com Subject: RE: [sniffer] Triggered rulebase update instructions Now I just wait for the next update to occur. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread Woody G Fussell
] On Behalf Of Landry William Sent: Tuesday, December 28, 2004 9:08 PM To: 'sniffer@SortMonster.com' Subject: RE: [sniffer] Triggered rulebase update instructions Attached is an updated instructions file to fix some typos and missed information. I'll send out another update after receiving feedback from

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread Landry William
-Original Message- From: Woody G Fussell [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 29, 2004 7:57 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Triggered rulebase update instructions Bill This would apply to Imail users. I suggest that rather than creating two aliases

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread Woody G Fussell
' Subject: RE: [sniffer] Triggered rulebase update instructions There are many ways to skin this cat. For Declude JunkMail Pro users, you could also setup a COPYTO action to notify the program alias. However, the dual alias setup appeared to be the simplest way for the novice mail admin to get

RE: [sniffer] Triggered rulebase update instructions

2004-12-29 Thread Landry William
, 2004 2:37 PM To: 'sniffer@SortMonster.com' Subject: RE: [sniffer] Triggered rulebase update instructions There are many ways to skin this cat. For Declude JunkMail Pro users, you could also setup a COPYTO action to notify the program alias. However, the dual alias setup appeared

Re: [sniffer] Downloads are slow...

2004-12-28 Thread Jim Matuska
Information Systems [EMAIL PROTECTED] - Original Message - From: Matt [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Monday, December 27, 2004 10:03 PM Subject: Re: [sniffer] Downloads are slow... I agree entirely. If bandwidth has become an issue, it would be resolved with a focus

RE: [sniffer] Downloads are slow...

2004-12-28 Thread Woody G Fussell
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Matuska Sent: Tuesday, December 28, 2004 12:49 PM To: sniffer@SortMonster.com Subject: Re: [sniffer] Downloads are slow... I agree that something needs to be done about the update scripts that are inadvertently

RE: [sniffer] Downloads are slow...

2004-12-28 Thread Brian Gregory
[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woody G Fussell Sent: Tuesday, December 28, 2004 12:25 PM To: sniffer@SortMonster.com Subject: RE: [sniffer] Downloads are slow... Why do you not use a program alias and only download when

Re: [sniffer] Downloads are slow...

2004-12-28 Thread Russ Uhte
Brian Gregory wrote: Does anyone have some simple instructions on how to setup to use a program alias? I'm using Bill Landry's script, have not had the time to look in to using a program alias to download upon receipt of notifications. I just setup a program alias about 2 weeks ago using this as

Re: [sniffer] Downloads are slow...

2004-12-28 Thread Darrell ([EMAIL PROTECTED])
Quick question if when you have a sucessful download if abcdef.new is renamed than what is wget comparing on the next run of the script? Darrell Jim Matuska writes: So far it seems to be working, at least it doesn't seem to be downloading the rulebase yet, I'll have to see if it does later

RE: [sniffer] Downloads are slow...

2004-12-28 Thread Andy Schmidt
/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, December 28, 2004 02:39 PM To: sniffer@SortMonster.com Subject: Re: [sniffer] Downloads are slow... Quick question if when you have a sucessful download if abcdef.new

Re: [sniffer] Downloads are slow...

2004-12-28 Thread Jim Matuska
] - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Tuesday, December 28, 2004 11:38 AM Subject: Re: [sniffer] Downloads are slow... Quick question if when you have a sucessful download if abcdef.new is renamed than what is wget

Re: [sniffer] Sniffer Downloads

2004-12-28 Thread Russ Uhte
of the additional steps? I just pointed my program alias directly to my snfupd.cmd file and it works just fine. Bill -Original Message- From: Russ Uhte [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 28, 2004 12:33 PM To: Daniel Ivey Cc: sniffer@SortMonster.com Subject: Re: [sniffer

Re: [sniffer] Sniffer Downloads

2004-12-28 Thread Serge
rem this script is used to update sniffer rulbase rem most of this was ibased on / inspired by what other users posted on this list, I thanks everybody for their inputs rem it calls wget, fgrep, imail1, gzip, snf2check rem it checks for new files, and can be used by both alias trigger or

RE: [sniffer] Triggered rulebase update instructions

2004-12-28 Thread Landry William
Attached is an updated instructions file to fix some typos and missed information. I'll send out another update after receiving feedback from others. Bill --- This message and any included attachments are from

RE: [sniffer] Triggered rulebase update instructions

2004-12-28 Thread John Tolmachoff (Lists)
Of Matt Sent: Tuesday, December 28, 2004 10:17 PM To: sniffer@SortMonster.com Subject: Re: [sniffer] Triggered rulebase update instructions Bill, I think that this is overwhelmingly much better (the whole thing), but I have a few suggestions to add. 1) The commenting in the CMD file seemed a bit

RE: [sniffer] Triggered rulebase update instructions

2004-12-28 Thread Landry William
Title: Message Thanks for all of the suggestions, Matt. See my comments below: -Original Message-From: Matt [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 28, 2004 10:17 PMTo: sniffer@SortMonster.comSubject: Re: [sniffer] Triggered rulebase update instructionsBill,I

RE: [sniffer] Triggered rulebase update instructions

2004-12-28 Thread Landry William
: sniffer@SortMonster.comSubject: RE: [sniffer] Triggered rulebase update instructions Matt, you think too much. ;) (From one who needs to implement better scripts, including a triggered script for Sniffer.) John Tolmachoff Engineer/Consultant/Owner eServices

Re: [sniffer] Downloads are slow...

2004-12-27 Thread Pete McNeil
On Monday, December 27, 2004, 1:17:21 AM, Chuck wrote: CS Pete: CS It appears on weekends the sniffer downloads are really slow. I am CS downloading at 14 minutes past the hour and I am about 1/20 th of the normal CS speed. That is an unusual observation - I don't think weekends have anything

Re: [sniffer] Excess spam over the weekend

2004-12-27 Thread Pete McNeil
On Monday, December 27, 2004, 10:24:00 AM, Jim wrote: JM Is anyone else seeing a huge flood of spam over the JM weekend?  I have received a ton of it since Friday, a lot of it is JM not being picked up by sniffer either.  I believe I can explain this phenomena. Over weekends and holidays

RE: [sniffer] Excess spam over the weekend

2004-12-27 Thread Chuck Schick
Jim: We saw just the opposite. The amount of Spam appeared to be down over the holiday weekend. We saw less total volume and less spam in the spam traps. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

Re: [sniffer] Sniffer Updates

2004-12-27 Thread Russ Uhte
Kevin Stanford wrote: Our updates seem to be taking a very long time. I am 85% updated and the ETA shows 07:00. Is it me? I see stuff like this come and go... Our updates are (finally) triggered from the email notifications... Below is a snippet of the last update that shows exactly what

Re: [sniffer] Sniffer Updates

2004-12-27 Thread Jim Matuska
PROTECTED] - Original Message - From: Russ Uhte [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Monday, December 27, 2004 8:45 AM Subject: Re: [sniffer] Sniffer Updates Kevin Stanford wrote: Our updates seem to be taking a very long time. I am 85% updated and the ETA shows 07:00. Is it me

Re: [sniffer] Sniffer Updates

2004-12-27 Thread Jim Matuska
Jim Matuska Jr.Computer Tech2, CCNANez Perce TribeInformation Systems[EMAIL PROTECTED] - Original Message - From: "Jim Matuska" [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Monday, December 27, 2004 9:22 AM Subject: Re: [sniffer] Sniffer Updates I too am seeing r

RE: [sniffer] Conditional Sniffer Updates

2004-12-27 Thread Landry William
Curl is an awesome application that we also use for automating downloads. Wget also supports conditional downloads based on time/date stamp when using the -N switch. In ether case, please also use the compression support built into each application, the sniffer rulebase files can be compressed

RE: [sniffer] Downloads are slow...

2004-12-27 Thread Andy Schmidt
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, December 27, 2004 08:10 AM To: Chuck Schick Subject: Re: [sniffer] Downloads are slow... On Monday, December 27, 2004, 1:17:21 AM, Chuck wrote: CS Pete: CS It appears on weekends the sniffer downloads

Re: [sniffer] Downloads are slow...

2004-12-27 Thread Matt
) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, December 27, 2004 08:10 AM To: Chuck Schick Subject: Re: [sniffer] Downloads are slow... On Monday, December 27, 2004, 1:17:21 AM

Re: [sniffer] Change in coding policies

2004-12-22 Thread Chris Ulrich
OK, being a new (and very happy) customer ... For example, we will be introducing rules that watch for bounces that contain large numbers of failed addresses - indicating a probable dictionary attack / joe-job ... What is a joe-job? Spam from Billy Bob? Send coffee... Chris This E-Mail

RE: [sniffer] Change in coding policies

2004-12-22 Thread Landry William
Title: Message -Original Message-From: Chris Ulrich [mailto:[EMAIL PROTECTED]] OK, being a new (and very happy) customer ... For example, we will be introducing rules that watch for bounces that contain large numbers of failed addresses - indicating a probable dictionary attack /

RE: [sniffer] Sniffer updates...

2004-12-22 Thread Craig Deal
Title: Message I currently use mxGuard. It works great for me with F-Prot, ClamAV, and Message Sniffer. Declude has more configuration options, but for the price mxGuard is hard to beat. Plus the cost is low enough that you can afford to purchase more than one copy if you have multiple

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Pete McNeil
snip/ JW Does anyone have a complete list of mail servers that have JW direct support for Sniffer?  The Imail / Declude thing is too much JW to deal with and I'm going to make a change. http://www.sortmonster.com/MessageSniffer/Installation/HowTo.html There are others also, not officially

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Matt
Title: Message Joe, In their defense, I don't think that they necessarily knew any better than to have approached it this way. I don't necessarily get that the new ownership has worked from the IT side of the business before and understands security and trust as a corporate administrator

RE: [sniffer] Sniffer updates...

2004-12-22 Thread Michiel Prins
Title: Message There's a Sniffer plugin for MDaemon v8.0 (MD 8.0 is still in beta) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe WolfSent: woensdag 22 december 2004 15:42To: [EMAIL PROTECTED]Subject: [sniffer] Sniffer updates... I'm currently using Sniffer via Imail

RE: [sniffer] Sniffer updates...

2004-12-22 Thread John Tolmachoff (Lists)
] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, December 22, 2004 7:23 AM To: [EMAIL PROTECTED] Subject: Re: [sniffer] Sniffer updates... Joe, In their defense, I don't think that they necessarily knew any better than to have approached it this way. I don't necessarily get that the new

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Jim Matuska
Title: Message After much debate we decided to abandon Declude/Imail and switch to Mdaemon and will migrate sniffer to the new platform. Jim Matuska Jr.Computer Tech2, CCNANez Perce TribeInformation Systems[EMAIL PROTECTED] - Original Message - From: Joe Wolf To: [EMAIL

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Scott Fosseen
Title: Message I may have missed this if it was discussed. But my last conversation with IPSwitch is that as a current user of IMail I can continue to purchase support and keep getting updates to the IMail portions without going to the new product. The person told me that the Collaboration

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Matt
Title: Message Scott Fosseen wrote: I may have missed this if it was discussed. But my last conversation with IPSwitch is that as a current user of IMail I can continue to purchase support and keep getting updates to the IMail portions without going to the new product. The

Re: [sniffer] Sniffer updates...

2004-12-22 Thread Joe Wolf
ve had no complaints with it at all. Seems to do exactly what I was told it would do. Thanks to everyone for their input! -Joe - Original Message - From: John Tolmachoff (Lists) To: [EMAIL PROTECTED] Sent: Wednesday, December 22, 2004 9:58 AM Subject: RE: [sniffer

Re: [sniffer] why?

2004-12-21 Thread Pete McNeil
On Tuesday, December 21, 2004, 6:20:40 AM, System wrote: SA Pete, SA Our subscribers can forward spam they receive to our [EMAIL PROTECTED] SA address, which gets forwarded to you guys. Some spammers have been sending SA e-mail messages directly to the [EMAIL PROTECTED] address (cutting out the

Re: [sniffer] why?

2004-12-21 Thread System Administrator
on 12/21/04 8:21 AM, Pete McNeil wrote: The second possibility is that we've skipped the message for some safety reason (trying to avoid false positives) though it seems unlikely in this case. Once I see it I will be able to tell more. Would adding direct to spam in the subject make these

RE: [sniffer] Change in coding policies

2004-12-21 Thread Colbeck, Andrew
It sounds good to me, Pete. May I humbly suggest that this be a new result code, e.g. 046? Until now, Message Sniffer has been very parsimonious with the new categories, but this looks like one that will be here for a long time. Andrew 8) -Original Message- From: [EMAIL PROTECTED]

Re: [sniffer] Change in coding policies

2004-12-21 Thread Matt
Given that the precision is difficult to assign under the single result framework, I don't doubt the choice. Might I suggest creating a sub-group for the three main types of backscatter so that individuals can turn them off as a group instead of one rule at a time. Note that the three groups

Re: [sniffer] Change in coding policies

2004-12-21 Thread Matt
FYI, I'm still debating myself about what to do with this stuff. I'm hoping that it will go away, albeit slowly, and I presently rarely take action to correct any issues with this E-mail, though I do reprocess some individual messages. Seems that many of the C/R providers have gotten better

Re: [sniffer] Download server is really slow..

2004-12-20 Thread Russ Uhte
Pete McNeil wrote: On Monday, December 20, 2004, 7:58:57 AM, Alexander wrote: HA Hello, HA I'm trying at the moment, Wget says 50-90 K/s (started at 40, went quick up HA to 90 and now going down to 50K/s) There are times - especially at the top of the hour - where there are quite a few downloads

Re: [sniffer] My issues with the General category, looking forabettersolution

2004-12-17 Thread Matt
Greg, Yes, I should have inserted a "probably" or otherwise taken more care with my words. I didn't mean for my reply to be contentious. Anyway, here's a sample of what I am talking about. I've isolated most major bulk-mail providers from the rest of my Hold E-mail which constitutes about 2%

Re: [sniffer] My issues with the General category, looking forabettersolution

2004-12-17 Thread Scott Fisher
. - Original Message - From: Matt To: [EMAIL PROTECTED] Sent: Friday, December 17, 2004 6:35 AM Subject: Re: [sniffer] My issues with the General category, looking forabettersolution Greg,Yes, I should have inserted a "probably" or otherwise taken more care with m

Re: [sniffer] Download server is really slow..

2004-12-15 Thread Greg Wanner
Me too [EMAIL PROTECTED] - Original Message - From: Chuck Schick [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 15, 2004 7:44 PM Subject: [sniffer] Download server is really slow.. Anyone else having that problem? Chuck Schick Warp 8, Inc. (303)-421-5140

Re: [sniffer] Few questions

2004-12-13 Thread Pete McNeil
On Monday, December 13, 2004, 3:40:41 PM, ~ wrote: ~RZ~ Hey everyone... ~RZ~ How does this whole trial thing work? What is limited about it? How does ~RZ~ the spam rule file update? How long will it work? How do i change from the ~RZ~ old spam file to the new one? Many questions One at a

Re: [sniffer] Required reload question?

2004-12-10 Thread Pete McNeil
On Friday, December 10, 2004, 12:14:22 PM, Rick wrote: RR If I make a change to any of the whitelist,blacklist, or trusted files, and RR I'm using sniffer in a 'persistent' mode, do I have to restart anything to RR pick up the changes? I'm not sure I completely understand. If there are changes

RE: RE: [sniffer] Required reload question?

2004-12-10 Thread Craig Deal
PROTECTED] Behalf Of Pete McNeil Sent: Friday, December 10, 2004 10:06 AM To: Rick Robeson Subject: Re: [sniffer] Required reload question? On Friday, December 10, 2004, 12:14:22 PM, Rick wrote: RR If I make a change to any of the whitelist,blacklist, or trusted RR files, and RR I'm using sniffer

RE: [sniffer] Required reload question?

2004-12-10 Thread Rick Robeson
. Rick Robeson getlocalnews.com [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Friday, December 10, 2004 10:06 AM To: Rick Robeson Subject: Re: [sniffer] Required reload question? On Friday

RE: [sniffer] test sender

2004-12-10 Thread Colbeck, Andrew
Title: Message Well, an indirect way to do this is to use the (undocumented?) Declude directive: rsp set off TESTNAME as the first bit of text in your test message. That won't actually trigger sniffer, but it will for the purpose of making your JunkMail think that the test has been

Re: [sniffer][sniffer]

2004-12-10 Thread DLAnalyzer Support
Katie, Take a copy of the failed message and submit it to [EMAIL PROTECTED] with your lcinese base ID and they will tell you why it failed and setup a whiterule to prevent it from being tagged in the future. Darrell

RE: [sniffer] Mdeamon Problems

2004-12-08 Thread Michiel Prins
Rob, If you followed the walkthrough on the site, you should have result code headersin your e-mail messages. Could you check if that's the case? Regards, Michiel From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ~ ROB @ ZELLEM ~Sent: woensdag 8 december 2004 20:54To:

Re: [sniffer] New Version 2-3.2 has been officially released.

2004-12-06 Thread Pete McNeil
On Monday, December 6, 2004, 3:18:01 PM, Mark wrote: MES Pete, MES Just downloaded the most recent version and the command line build MES information says: MES Build - v2-3.1 Oct 26 2004 22:03:06 MES I downloaded it twice from the help page. What is the URL to the help page? I want to correct

Re:[sniffer] Test ordering/precedence

2004-12-02 Thread Serge
Where can i find examples of using exit codes to assign different weights depending on groupes, when using sniffer with declude/imail ? TIA - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Jim Matuska [EMAIL PROTECTED] Sent: Thursday, December 02, 2004 9:59 PM Subject:

Re: [sniffer] It's worth it

2004-11-30 Thread SniffMe
[EMAIL PROTECTED] Sent: Tuesday, November 30, 2004 2:09 AM Subject: Re: [sniffer] It's worth it On Tuesday, November 30, 2004, 1:14:00 AM, Andrew wrote: CA So, I've been using the free trial edition of Sniffer for CA the better part of 2 years (wow, time flies!) and just purchased CA two licences

Re: [sniffer] Recent SPAM

2004-11-30 Thread Pete McNeil
On Tuesday, November 30, 2004, 12:11:12 PM, David wrote: DLW Has anyone else seen a massive increase in SPAM not being caught by Messgae DLW Sniffer recently? On a personal level I'm now seeing around 20-30 undetected DLW junk emails per day whereas a couple of weeks ago it was of the order 2-5

RE: [sniffer] Recent SPAM

2004-11-30 Thread Chuck Schick
Yes, I have seen three pieces of spam over and over again - two for drugs and one porn. I am running the latest version, rules are up to date, no on the log files, I am forwarding the emails to [EMAIL PROTECTED] I was thinking about raising this issue so I am glad someone else is seeing the

RE: [sniffer] Not Getting Updates

2004-11-29 Thread John Tolmachoff (Lists)
] Subject: Re: [sniffer] Not Getting Updates Pete, I forward all my messages from '[EMAIL PROTECTED]' to trigger my update. If my renewal notice is sent from the same address I will not receive it. Can you send me a update notification email or let me know what else to create the rule on. I

Re: [sniffer] Not Getting Updates

2004-11-29 Thread Josh Piche
How do you get the email to trigger an update? Josh Piche Systems Administrator CAUT Scott Fosseen wrote: Pete, I forward all my messages from '[EMAIL PROTECTED]' to trigger my update. If my renewal notice is sent from the same address I will not receive it. Can you send me a update notification

Re: [sniffer]

2004-11-29 Thread Pete McNeil
On Monday, November 29, 2004, 3:43:03 PM, Steinar wrote: SR Hi! SR I want to try a new rule strength with Sniffer. SR Can I change this myself or is this done by SortMonster? I've responded to this off list. However, for the benefit of everyone... We will be offering expanded rulebases as

Re: [sniffer] Not Getting Updates

2004-11-28 Thread Pete McNeil
On Sunday, November 28, 2004, 6:01:39 PM, Richard wrote: RF I just noticed that I am no longer getting updated emails for the sniffer to RF trigger the automatic update.. The last one was on Nov 11...Customers had RF told me they were getting more spam but I just thought we were getting RF

Re: [sniffer] Not Getting Updates

2004-11-28 Thread Scott Fosseen
Pete, I forward all my messages from '[EMAIL PROTECTED]' to trigger my update. If my renewal notice is sent from the same address I will not receive it. Can you send me a update notification email or let me know what else to create the rule on. I could turn off the rule for a little while

Re: [sniffer] Error running persitent

2004-11-28 Thread Heimir Eidskrem
Heimir Eidskrem wrote: We did move Imail to a new server tonight and now im seeing some errors in the sniffer logs. What would cause this? I am using Firedeamon to run sniffer in persitent mode. I must have missed something in the transfer but not sure what. 20041129052719persitent453

Re: [sniffer] Error running persitent

2004-11-28 Thread Pete McNeil
On Monday, November 29, 2004, 12:31:57 AM, Heimir wrote: HE We did move Imail to a new server tonight and now im seeing some errors HE in the sniffer logs. HE What would cause this? If you look carefully you will see that persistent is mis-spelled. It is missing an 's'. As a result it is being

Re: [sniffer] New Version 2-3.2 has been officiallyreleased.

2004-11-24 Thread Scott Fosseen
, November 24, 2004 12:10 PM Subject: Re: [sniffer] New Version 2-3.2 has been officiallyreleased. System Administrator wrote: on 11/24/04 12:19 PM, Colbeck, Andrew wrote: p.s. More favourite acronyms: RGE (Resume Generating Event) TLA (Three Letter Acronym) PEBKAC (problem exist between keyboard

RE: [sniffer] New Version 2-3.2 has been officially released.

2004-11-23 Thread Keith Johnson
We run Sniffer in the normal way (non-persistent), is there an extra file that we must copy into the Sniffer directory in order for this version to work properly? I believe I read somewhere of a config file that contains needed settings. Thanks again, Keith -Original Message- From:

RE: [sniffer] How are folks doing with the latest version?

2004-11-19 Thread Andy Schmidt
Running without known problems. Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL

RE: [sniffer] How are folks doing with the latest version?

2004-11-19 Thread Chuck Breitkreutz
Running smoothly here... Chuck Breitkreutz Phone: (940) 549-0339 Fax: (940) 549-0393 Digital Passage -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, November 19, 2004 2:28 PM To: [EMAIL PROTECTED] Subject: [sniffer] How are

RE: [sniffer] How are folks doing with the latest version?

2004-11-19 Thread Robert Grosshandler
Lowish volume box, no problems seen. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, November 19, 2004 2:28 PM To: [EMAIL PROTECTED] Subject: [sniffer] How are folks doing with the latest version? Hello Sniffer Folks, I am

Re: [sniffer] How are folks doing with the latest version?

2004-11-19 Thread Herb Guenther
We updated an imail server and it is fine, did not do the postfix mail server update yet. Herb Pete McNeil wrote: Hello Sniffer Folks, I am curious to know how many folks have been using Version 2-3.1i2. I have not heard any problem reports, so I'm assuming it's going well with you as it

RE: [sniffer] How are folks doing with the latest version?

2004-11-19 Thread Landry William
So far so good... Bill -Original Message- From: Pete McNeil [mailto:[EMAIL PROTECTED] Sent: Friday, November 19, 2004 12:28 PM To: [EMAIL PROTECTED] Subject: [sniffer] How are folks doing with the latest version? Hello Sniffer Folks, I am curious to know how many folks have been

Re: [sniffer] MDaemon Opinion OT

2004-11-11 Thread Tech Support
11, 2004 3:38 AM Subject: Re: [sniffer] MDaemon Opinion OT One thing to consider before making the Imail - MDaemon jump (or similar mailservers)... When I evaluated MDaemon, I noticed that messages are stored in individual .msg files inside the user's mailbox directory. Imail

<    1   2   3   4   5   6   7   8   9   10   >