RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] Porn spam from Earthlink (Vacation)

2004-09-12 Thread Keith Ortego
I will be on vacation beginning Tuesday 9-7 through Friday 9-10, returning on Monday 9-13. If you have an emergency, please contact Lisa Parker or Sheryl Yowl at 504-734-8000. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] Porn spam from Earthlink

2004-09-12 Thread Pete McNeil
On Sunday, September 12, 2004, 2:34:50 PM, Heimir wrote: HE Pete, HE   HE I am getting porn spam from EarthLink every day, several times a day. HE I get them on 2 of my personal accounts. HE   HE I have complaint to abuse @ EarthLink for a while now but I HE do not get any response beside the

Re: [sniffer] Keith Ortego Vacation Loop - sorry, fixed now.

2004-09-12 Thread [EMAIL PROTECTED]
Hi, Thank YOU! Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Sunday, September 12, 2004, 8:27:56 PM, you wrote: Hello Sniffer folks, Sorry for not capturing the loop sooner. I've dropped Keith from the list for now to stop the loop. I took a few

Re: [sniffer] Upgrade to Flow Rates Analysis

2004-09-04 Thread Karen Perry
news item? -- Original Message -- From: Pete McNeil [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 2 Sep 2004 14:34:32 -0400 Hello Sniffer Folks, We have upgraded the flow rates analysis to include a bar graph display for each hour. The bar

RE: [sniffer] Upgrade to Flow Rates Analysis

2004-09-02 Thread Darrell LaRock
Pete, How does this graph differentiate between Ham and Spam? Can't some Ham be uncaught spam? And some messages identified as SPAM really be Ham? Darrell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Thursday, September 02, 2004

Re: [sniffer] Curious Postfix Install Problem.

2004-09-01 Thread Ken Scott
---1 snfilter root 4222328 Aug 31 12:56 snfrv2r3.snf -r-x--1 snfilter root 3969 Aug 31 14:33 sniffer - Original Message - From: Ken Scott [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, September 01, 2004 12:24 PM Subject: Re: [sniffer] Curious Postfix Install

Re: [sniffer] Stock obfuscation question

2004-08-25 Thread Pete McNeil
On Wednesday, August 25, 2004, 2:11:47 PM, Scott wrote: SF Are there any rules in place to deal with this obfuscation? SF Sec. tion SF 2. 7, A o, f the Sec, urities A, ct of 19. 33 and Se.ction 2. 1B SF of the Se. curities Excha. nge A, ct of 19. 34. Yes... When we get a pump and dump spam we

Re: [sniffer] Help

2004-08-24 Thread Richard Farris
PROTECTED] Sent: Friday, March 26, 2004 2:41 PM Subject: Re: [sniffer] Help This seems like a rulebase thing.We spoke on the phone.If the problem isn't solved by getting a fresh rulebase then we should go hunting for a rule. Send a note to yourself with sniffer on, then grab

Re: [sniffer] Charset

2004-08-20 Thread Vivek Khera
On Aug 20, 2004, at 10:36 AM, Jorge Asch wrote: Well, since 100% of my users speak english/spanish I can safely bet that NONE of my mail should have strange character sets. So I can assume if they do, they must be spam. Be careful about that. I've gotten pure English email from folks in

RE: [sniffer] Charset

2004-08-19 Thread Michiel Prins
Can't you use the content filter of your mail server to detect if the charset is used? Met vriendelijke groet, ing. Michiel Prins SOS Small Office Solutions / REJECT Wannepad 27 1066 HW Amsterdam tel. 020-4082627 fax. 020-4082628 [EMAIL PROTECTED] -Original Message- From: [EMAIL

Re: [sniffer] Charset

2004-08-19 Thread Jorge Asch
We could then turn on or off the languages we didn't want. From my foray with dealing with Chinese, it certainly much easier said than done. Chinese was doable, I've had no luck stopping my Spanish spam. Then again, you might be better at it than I. Problem with spanish, is that we use the same

RE: [sniffer] Automatic update snafu

2004-08-18 Thread Shaun Sturby, MCSE Optrics Engineering
Hello John, I have built a similar script using WGET and the only big difference I can see is that I use wget -N http://www.sortmonster.net You can try putting the -N right after wget and see if it works better for you. How are you testing? Do you copy an older snf file over to compare

RE: [sniffer] Automatic update snafu

2004-08-18 Thread John Shacklett
I'll give that a shot. I'm testing by forcing unscheduled at jobs with the scheduler. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun Sturby, MCSE Optrics Engineering Sent: Wednesday, August 18, 2004 10:44 AM To: [EMAIL PROTECTED] Subject: RE

Re: [sniffer] DidTheyReadIt

2004-08-02 Thread Jorge Asch
Well, didtheyreadit is not actually spam. It's an annoyance. (it's a service supposed to alert the sender of the email when the recipient has read the message, and how many times...) On Monday, August 2, 2004, 12:06:30 PM, Woody wrote: WF Does Sniffer have a rule that identifies email that uses

RE: [sniffer] Did They Rea d It

2004-08-02 Thread Woody Fussell
to use the phrase filter for now and may request a new rule when that fails to be effective. Thanks Woody -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Monday, August 02, 2004 12:14 PM To: Woody Fussell Subject: Re: [sniffer] Did They ReadIt

Re: [sniffer] Did They Rea d It

2004-08-02 Thread John Cline
02, 2004 12:14 PM WF To: Woody Fussell WF Subject: Re: [sniffer] Did They ReadIt WF On Monday, August 2, 2004, 12:06:30 PM, Woody wrote: WF Does Sniffer have a rule that identifies email that uses the services of WFwww did they read it . com? If so, what category does it match. If not, WF can

RE: [sniffer] Did They Read It--not spam?

2004-08-02 Thread Woody Fussell
Of Jorge Asch Sent: Monday, August 02, 2004 12:42 PM To: [EMAIL PROTECTED] Subject: Re: [sniffer] Did They Read It Well, did they read it is not actually spam. It's an annoyance. (it's a service supposed to alert the sender of the email when the recipient has read the message, and how many times

RE: [sniffer] Did They Rea d It---headers

2004-08-02 Thread Woody Fussell
: Monday, August 02, 2004 9:06 PM To: [EMAIL PROTECTED] Subject: RE: [sniffer] Did They Rea d It Woody, Could you possibly forward me a copy of the headers of a message using this service, so that I can design my own iMail filter? Thanks! William Van Hefner Network Administrator Vantek

RE: [sniffer] Rule Strengths

2004-07-31 Thread John Tolmachoff (Lists)
(Moved to list) Thanks, got it. This is my current lines, do I need to add others, or are the rules within these codes? (I hold at 25 and delete at 35) Is there a full list of codes on the web site? SNIFFER-TRAVEL external 04715 0 SNIFFER-INSURANCE external 04815

Re: [sniffer] Effectiveness (lately)

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 10:42:40 AM, Jorge wrote: JA Has something happened lately (in the last 24-48 hours). Nothing significant that I can see except for a higher than usual spike in spam through the evening hours last night. JA Normally, I get small amounts (less than 10 a day) of spam

RE: [sniffer] FIN File

2004-07-29 Thread Landry William
It's an orphan, you can safely delete it. Bill -Original Message- From: Keith Johnson [mailto:[EMAIL PROTECTED] Sent: Thursday, July 29, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [sniffer] FIN File I found a .fin file in my sniffer directory and didn't know if anyone knew what it

Re: [sniffer] FIN File

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 1:28:45 PM, Keith wrote: KJ I found a .fin file in my sniffer directory and didn't know if anyone KJ knew what it was and how it is produced. It is dated several days ago. KJ Thanks for the aid. An orphaned .FIN file represents a message scan that was completed by a

Re: [sniffer] Reporting Spam

2004-07-29 Thread Jorge Asch
I have Alt-N MDaemon 7.1.2 Installed with Message Sniffer. I get any users who find that they have spam in their folder to move it to a public folder called 'Missed Spam'. You might want to ask this instead on the Alt-N's mailing lists... you don't have to be specific. Just ask if it's

Re: [sniffer] Spam submissions

2004-07-28 Thread Pete McNeil
On Wednesday, July 28, 2004, 5:34:43 AM, Landry wrote: LW Pete, I put together a little script that modifies the Q*.SMD LW file for identified spam messages that were held in my spam LW directory, but were not tagged by Sniffer, and can forward a copy LW of these messages to your spam@ address. 

RE: [sniffer] Spam submissions

2004-07-28 Thread Landry William
-Original Message- From: Pete McNeil [mailto:[EMAIL PROTECTED] LW Pete, I put together a little script that modifies the Q*.SMD file LW for identified spam messages that were held in my spam directory, LW but were not tagged by Sniffer, and can forward a copy of these LW messages to your

RE: [sniffer] spam leakage up

2004-06-24 Thread Dan Stratton
Yes I have seen an increase in spam not tagged by sniffer or in a lot of cases by any other of the declude tests that I am using. I also have notice quite a large increase in overall spam and attribute at least some of the leakage to this increase. Some day's I am seeing 94% spam and 6 %

Re: [sniffer] spam leakage up

2004-06-24 Thread Herb Guenther
wow, that is even worse than we are seeing, we are at about 80%, but should really be at about 85% if all were tagged. Here is our last weeks stats, we did not see an increase in volume, so much as the amount gettig thru in the last couple days and continuing today. Herb

Re: [sniffer] spam leakage up

2004-06-24 Thread Aaron J . Caviglia
Herb, How did you generate that SPAM report? Thanks, Aaron Caviglia www.vantech.net On Jun 24, 2004, at 8:46 AM, Herb Guenther wrote: wow, that is even worse than we are seeing, we are at about 80%, but should really be at about 85% if all were tagged.  Here is our last weeks stats, we did

Re: [sniffer] spam leakage up

2004-06-24 Thread Nick Hayer
On 24 Jun 2004 at 10:46, Herb Guenther wrote: Herb, very kool - nice output. How do you compile the info if you don't mind me asking? -Nick Hayer Here is our last weeks stats, we did not see an increase in volume, so much as the amount gettig thru in the last couple days and continuing

Re: [sniffer] spam leakage up

2004-06-24 Thread Herb Guenther
I wrote a coldfusion page that parses the logs into a sql database every night, and then the display page you saw. If you have a coldfusion server I would be happy to give you the code. Herb Aaron J.Caviglia wrote: Herb, How did you generate that SPAM report? Thanks, Aaron

Re: [sniffer] spam leakage up

2004-06-24 Thread Computer House Support
Yes, I would also like to know how you generated that nice spam report. Michael SteinComputer Housewww.computerhouse.com - Original Message - From: Herb Guenther To: [EMAIL PROTECTED] Sent: Thursday, June 24, 2004 11:46 AM Subject: Re: [sniffer] spam leakage up

Re: [sniffer] spam leakage up

2004-06-24 Thread Aaron Caviglia
Thanks Herb but we don't have Coldfusion. Looks great tho! Aaron www.vantech.net On Jun 24, 2004, at 8:55 AM, Herb Guenther wrote: I wrote a coldfusion page that parses the logs into a sql database every night, and then the display page you saw.  If you have a coldfusion server I would be

RE: [sniffer] spam leakage up

2004-06-24 Thread Tom Baker | Netsmith Inc
, 2004 10:55 AMTo: [EMAIL PROTECTED]Subject: Re: [sniffer] spam leakage up I wrote a coldfusion page that parses the logs into a sql database every night, and then the display page you saw. If you have a coldfusion server I would be happy to give you the code.HerbAaron J.Caviglia wrote: Herb

RE: [sniffer] Reporting

2004-06-24 Thread Andy Schmidt
Hi Pete: I think XML is the way to go. The lack of feedback may not be due to your choice of format - but rather that there really isn't too much to discuss about the obviousyfields that your sample offered. I did provide some feedback - but overall I felt you were on the right track and

Re: [sniffer] Reporting - was: spam leakage up

2004-06-24 Thread Matt
Pete, If the data is normalized, tab delimited seems like the most widely available choice. I've never played with XML, and although it might be more useful in many places, in others it presents overhead, especially as far as a learning curve goes. It may also be that real-time reporting

Re: [sniffer] Problem sending logs

2004-06-23 Thread Pete McNeil
On Wednesday, June 23, 2004, 4:30:48 AM, John wrote: JTL Trying to set up a new client. JTL Testing the logrotate script. JTL Starting at about 01:10 AM to test, can not upload logs. I kept getting not JTL connected messages. I checked through the logs and didn't see any problems. We seem to

RE: [sniffer] Problem sending logs

2004-06-23 Thread Kevin Stanford
: ### X-Note: End eServices For You headers at 07:55:57 on 06/23/2004. # X-Note: To report any issues, please contact [EMAIL PROTECTED] # X-Note: ### X-Declude-Spoolname: D99f30a0.SMD Subject: RE: [sniffer

Re: [sniffer] Declude configuration

2004-06-14 Thread Scott Fisher
Here's what I use: My subject tag weight is 100 points. So in general sniffer weighs in at 90%. The greymail (60) needs some taming. I run a greymail whitelist to credit back 42 points to those that I don't consider spam. That's the only code you really need to be wary of. You may tend to get

RE: [sniffer] Declude configuration

2004-06-14 Thread Landry William
Here is a sample of what I use: = SNIFFER-TRAVEL external 047 M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode 05 0 SNIFFER-INSURANCE external 048 M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode 10 0 SNIFFER-AV-PUSH external 049

RE: [sniffer] automate sniffer updates

2004-06-11 Thread Muna Sakya
I just run a scheduled task 6 times a day to automate. Muna Sakya __ Systems/Network Engineer Information Technology eXperts (ITX) 2120 S. College Ave. Fort Collins, CO 80525 Main : (970) 282-7333 ext. 102 Cell : (970) 443-2147 Fax : (970) 282-3764 email:

RE: [sniffer] German Spam?

2004-06-10 Thread Steinar Rasch
I am also receiving what seems to be German spam. Regards, Steinar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ali Resting Sent: 10. juni 2004 12:20 To: [EMAIL PROTECTED] Subject: [sniffer] German Spam? I have been receiving a lot of spam

RE: [sniffer] German Spam?

2004-06-10 Thread Steinar Rasch
I am also receiving what seems to be German spam. Regards, Steinar Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] German Spam?

2004-06-10 Thread Michiel Prins
] Subject: RE: [sniffer] German Spam? I am also receiving what seems to be German spam. Regards, Steinar Denne eposten er skannet og funnet fri for virus av Epost.no med Declude og FRISK F-Prot Software. This E-Mail came from the Message Sniffer mailing list. For information and (un

RE: [sniffer] repeat offender not being blocked properly

2004-06-07 Thread Rick Robeson
We're still getting effectively the same spam ad (for weeks now) from something who's subject is always: Global FiberNet Order Confirmation It's been reported at least a couple dozen times by me and I'm sure more by others. Is there some reason this isn't being blocked by your filters? It seems

Re: [sniffer] Spammer pollution

2004-06-07 Thread Pete McNeil
On Monday, June 7, 2004, 6:20:25 PM, Matt wrote: M Pete, M I'm guessing that you have seen this already, but check out all of the M domains that are listed in this zombie spam: M

Re: [sniffer] Spammer pollution

2004-06-07 Thread Pete McNeil
On Monday, June 7, 2004, 6:20:25 PM, Matt wrote: M Pete, M I'm guessing that you have seen this already, but check out all of the M domains that are listed in this zombie spam: M

RE: [sniffer] FYI and Thanks

2004-06-04 Thread Rick Robeson
Hey Pete: FYI: Spam filters seem to be working exceptionally well the past 2 days. Almost nothing gets through (I've also got my spam route rule set to level20). Thanks. Rick Robeson getlocalnews.com [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: [EMAIL

Re: [sniffer] v2-3 persistent and Linux

2004-05-24 Thread Pete McNeil
At 08:26 PM 5/23/2004, you wrote: Does this mean that WinX machines should ensure that they are rebooted at least every 24 days to avoid overflowing the clock() value until the next version is available? No. * Win32 machines do not appear to be effected (so far no reports and I haven't been able

Re: [sniffer] v2-3 persistent and Linux

2004-05-23 Thread Mike Nice
Does this mean that WinX machines should ensure that they are rebooted at least every 24 days to avoid overflowing the clock() value until the next version is available? (Fat chance of going that long between critical security patches!!) - Original Message - The problem you were

Re: [sniffer] v2-3 persistent and Linux

2004-05-22 Thread Pete McNeil
At 06:16 PM 5/22/2004, you wrote: Running v2.3 in Linux as follows causes Sniffer to consume 99% CPU indefinitely. Is anybody else seeing this? ./mysnfrname.exe myauthcode persistent When you run it without what happens? Did it creat a mysnfrname.log file? What is in it? When the instance is

RE: [sniffer] Automatic Updates

2004-05-22 Thread Bill Ball
Terence, FYI, XP does allow for multiple executions during the dayIve been using it for some time. On the schedule tab, youll notice an Advanced button; thats where you set the schedule to run, say, every two hours, etc. Hope thats helpful. Bill Ball Lion Network Solutions

RE: [sniffer] Automatic Updates

2004-05-22 Thread Terence Agius
Yes, I'm aware of that :) but I find its more convinient/elegant that an update is trigerred only when necessary! Thanks Terence -Original Message- From: Bill Ball [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Sat, 22 May 2004 19:52:09 -0700 Subject: RE: [sniffer] Automatic Updates

Re: [sniffer] Possible blip?

2004-05-21 Thread Scott Fisher
2 thoughts from me: 1. Right on on the Nigerian scams, possible keeping these rules longer. As I was forwarding out a Nigerian scam to the spam mailbox, I too wondered how long the Nigerian rules were kept in play. I might also add Nigeria's twin sister the International Lottery spam and Stock

Re: [sniffer] Possible blip?

2004-05-21 Thread Matt
Scott, Regarding my Cyrillic and Chinese filters, I did a review of a full week's held spam, looking for foreign languages and patterns to tag. I found from other research that the primary Chinese characterset, GB2312, contains the Western Latin characterset, and so someone could send an

Re: [sniffer] Possible blip?

2004-05-21 Thread Scott Fisher
Interesting. Are you searching for 2 character pairs with GB2312? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/21/04 01:46PM Scott, Regarding my Cyrillic and Chinese filters, I did a review of a full week's held spam, looking for foreign languages and patterns to

Re: [sniffer] OT: Language filtering in Declude, was Possible blip?

2004-05-21 Thread Matt
No, just one, but it won't score unless there is a header or body indication of the GB2312 or Windows-1251 charactersets. I'm using a combo filter in Declude where the HIGHBIT filter is non-scoring, and the CHINESE and CYRILLIC filters contain a line that says: TESTSFAILED END NOTCONTAINS

Re: [sniffer] OT: Language filtering in Declude, was Possibleblip?

2004-05-21 Thread Matt
I think you might have possibly identified the group of required characters. I'll give that a try. I'm not sure if any Cyrillic stuff has been passing through but this bears watching as well and I might have to change my list there as well. I am also tagging BIG5, however almost all spam

Re: [sniffer] OT: Language filtering in Declude, wasPossibleblip?

2004-05-21 Thread Scott Fisher
Wouldn't it be better to reverse the order? Run the subject and header tests on the majority of the mail. Then run the body with a TESTSFAILED END NOTCONTAINS CHINESE. You should end up with less body searches this way. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED]

Re: [sniffer] OT: Language filtering in Declude, wasPossibleblip?

2004-05-21 Thread Matt
Not if you want to exclude certain domains from hitting individual languages. The test for HIGHBIT pre-qualifies the message, and then there are separate tests for CHINESE and CYRILLIC that can each be independently excluded. I would have to exclude both languages/charactersets if I reversed

Re: [sniffer] Possible blip?

2004-05-21 Thread Pete McNeil
At 01:42 PM 5/21/2004, you wrote: Pete, Our Hold range has returned to more normal territory on Thursday. Here's the stats from snip/ One of my thoughts regarding minimum rule strengths and grace periods is that all groups aren't necessarily the same. For instance Nigerian scams are low volume

RE: [sniffer] Possible blip?

2004-05-20 Thread Michiel Prins
Crew, I reposrted this speed issue before, but despite very intensive debugging and testing, we have not found an external cause (meaning: not sniffer) for the following: When I use sniffer without the persisten flag, I get this log:

Re: [sniffer] Possible blip?

2004-05-19 Thread Pete McNeil
At 12:57 PM 5/19/2004, you wrote: Pete, I noted late last night that my rulebase grew by 700 KB over the size of the previous one that was archived on my machine, and also the hits for some of the tests were noticeably lower and I had a definite increase in the number of messages that scored in

Re: [sniffer] Possible blip?

2004-05-19 Thread Matt
Pete, I was judging based on the size of our Hold range which scores from 10-24. On Monday that was 1.86% of total traffic, but on Tuesday that was 2.83%. Message volume was hardly different. Other notables were that on Monday, Sniffer hit 77.27% of all E-mail but on Tuesday it hit 74.53%

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-14 Thread Pete McNeil
At 11:33 AM 5/14/2004, [EMAIL PROTECTED] wrote: HI Pete, I uploaded the new .exe file, renamed it to my number. I don't get this persistant instance thing...can you give this to me in laymans terms? Im just a simple network engineer with 17 years of experience. How do I get it working? I need

RE: [sniffer] Postfix Sniffer 2-3

2004-05-13 Thread Tom Baker | Netsmith Inc
Nothing to do with your conf. You would add a system-wide startup script to do something like file: /usr/local/etc/rc.d/sniffer-persistent.sh -- #!/bin/sh case $1 in start) # note the at the end tells the system to launch sniffer # into the background and not wait for

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-11 Thread Mike Nice
Installed it here and it works as advertised! - Original Message - This new version of Message Sniffer Screams! when using the new Persistent Instance option consistently achieving message scans in tens of milliseconds without the need for high-end hardware or additional network

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-11 Thread Pete McNeil
Thanks! _M At 10:09 PM 5/11/2004, you wrote: Installed it here and it works as advertised! - Original Message - This new version of Message Sniffer Screams! when using the new Persistent Instance option consistently achieving message scans in tens of milliseconds without the need for

RE: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-10 Thread Matt Day
04:59 To: [EMAIL PROTECTED] Subject: RE: [sniffer] Message Sniffer Version 2-3 Official Release! At 10:06 PM 5/9/2004, you wrote: Same problem here. (MDaemon ver. 7.01 - Latest) I've replaced the old .exe with the new 2.3 and renamed it with my license. Is there anything else? Persistent now

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-09 Thread Frederick Samarelli
Pete. Should we be able to just replace our .exe file with this one Fred - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, May 09, 2004 6:59 PM Subject: [sniffer] Message Sniffer Version 2-3 Official Release! 2004-05-08 - Message Sniffer

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-09 Thread Computer House Support
Are there step-by-step upgrade instructions posted anywhere? Our configuration is Windows 2000 server with Declude. I don't quite understand what needs to be done to enable the Persistent Instance option. Thank you, Michael Stein Computer House www.computerhouse.com 609 652-3222 This E-Mail

Re: [sniffer] Message Sniffer Version 2-3 Official Release!

2004-05-09 Thread Pete McNeil
At 11:36 AM 5/9/2004, you wrote: Pete. Should we be able to just replace our .exe file with this one Yes. It will act just like the current version. The persistent server option doesn't take effect until you launch an instance in persistent mode. Until then (or if the persistent server

<    4   5   6   7   8   9   10   11   >