[sniffer] Now OT: Re: [sniffer] Re: Opening truncate.gbudb.net

2010-05-10 Thread Sanford Whiteman
One impacted customer wanted me to put back their original pw back in. Boss can't learn a new one! Sheesh.. That makes me... cry. Not mail-related: a user of our web app forgot his password today and was having a ridiculously hard time using our password reset form (basic

[sniffer] Re: Sniffer Updates every 6 or 7 minutes

2009-11-02 Thread Pete McNeil
Rory Nimmo wrote: Hi folks. My Sniffer rule base is updating every 6 or 7 minutes today. I have not made any changes at my end. Can you shed any light on this please? It should be fixed now. A bug in smb (used internally to populate the delivery servers) causes datestamp problems when

[sniffer] Re: Sniffer 3.0 Installed

2008-10-04 Thread Pete McNeil
Hello Andy, First, let me say thanks for sharing all of this. We don't often get detailed feedback on these things. Your valuable insights will be used to make later releases better. With that said I will add a few comments here and there to explain why things are the way they are and help

[sniffer] Re: Sniffer 3.0 Froze Mail Server

2008-10-04 Thread Andy Schmidt
Ouch - 3.0 didn't even last 12 hours. Imail was frozen up because it apparently couldn't launch any more Sniffer client instances. Event Log was full with: Event Type:Information Event Source:Application Popup Event ID: 26 Description: Application popup:

[sniffer] Re: Sniffer 3.0 Installed

2008-10-04 Thread Pete McNeil
Hello Andy, Saturday, October 4, 2008, 12:28:44 PM, you wrote: HI Pete, Thanks for your feedback. I had to create the UpdateReady.txt file before I was able to test my update script from the command line but I didnt realize that I would be created in the Workspace folder. Without that

[sniffer] Re: Sniffer 3.0 Installed

2008-10-04 Thread Andy Schmidt
with different customer scenarios. Best Regards, Andy From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Saturday, October 04, 2008 3:52 PM To: Message Sniffer Community Subject: [sniffer] Re: Sniffer 3.0 Installed My best thinking at the moment is to perhaps

[sniffer] Re: FW: [sniffer] Re: Sniffer 3.0 Froze Mail Server

2008-10-04 Thread Andy Schmidt
: Saturday, October 04, 2008 10:07 PM To: Andy Schmidt Cc: [EMAIL PROTECTED] Subject: Re: FW: [sniffer] Re: Sniffer 3.0 Froze Mail Server Hello Andy, Saturday, October 4, 2008, 9:22:39 PM, you wrote: Hi Pete, Here the log files. I can't tell you WHEN the problem was triggered. I

[sniffer] Re: FW: [sniffer] Re: Sniffer 3.0 Froze Mail Server

2008-10-04 Thread Pete McNeil
Hello Andy, Saturday, October 4, 2008, 10:21:31 PM, you wrote: Hi Pete, Well, I eliminated WeightGate for the time being, just to do my due diligence. Also, since there is a fix sized buffer, I assume actually LOWERING the 3rdnumber (the allocation for each non-interactive process)

[sniffer] Re: Sniffer Version 3 Install for FreeBSD?

2008-09-29 Thread Pete McNeil
Hello Harry, Sunday, September 28, 2008, 10:39:42 PM, you wrote: I have been using Sniffer for several years with Declude and SmarterMail on Windows. I would like to move Sniffer to my IMGate Mail Gateway (Postfix / FreeBSD). Has anyone installed Version 3 of Sniffer on FreeBSD? The

[sniffer] Re: Sniffer Version 3 Install for FreeBSD?

2008-09-29 Thread Harry Palmer
Hi Pete, Please do send the new FreeBSD control script and doc at your convenience. Thank you, Harry Hello Harry, Sunday, September 28, 2008, 10:39:42 PM, you wrote: I have been using Sniffer for several years with Declude and SmarterMail on Windows. I would like to move

[sniffer] Re: Sniffer Version 3 Install for FreeBSD?

2008-09-29 Thread Pete McNeil
Hello Harry, Monday, September 29, 2008, 8:11:09 AM, you wrote: Hi Pete, Please do send the new FreeBSD control script and doc at your convenience. Our email are crossing in the ether. Before posting the new distribution prototype I created a README-SETUP file to help pull the

[sniffer] Re: Sniffer Helper App? UPDATE

2008-07-04 Thread Steve Guluk
Hello, As an update, the developer (Alexander N. Telegin) spent a number of hours on my server and seems to have sorted the bugs out in eWall. At this time the program is running well and as advertised. It's a nice little light gateway client that has some easy to use scripting features

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Rob McEwen
Steve Guluk wrote: snip Any suggestions on what I should consider to help with spam and also use Sniffer. Steve, Do you have the ability to add into your current filtering additional RBLs and/or URI blacklists? I have some good suggestions there! Rob McEwen

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Steve Guluk
On Jul 1, 2008, at 12:25 PM, Rob McEwen wrote: Steve, Do you have the ability to add into your current filtering additional RBLs and/or URI blacklists? I have some good suggestions there! Rob McEwen Rob, If I move away from eWall I will be left with just iMail till I find something

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Rob McEwen
Steve, What I'm getting is this... the ultimate in low resource spam protection is blocking based on the sending IP using a prolific DNSBL like zen.spamhaus.org that, like zen, has extreme low FPs. Because the message is blocked at the perimeter using just a single lookup on the sender's ip.

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Herb Guenther
Steve; Declude works well, but any comprehensive set of filters will take some horsepower to run. Declude will do the country filtering I think you wanted. Herb Steve Guluk wrote: On Jul 1, 2008, at 12:25 PM, Rob McEwen wrote: Steve, Do you have the ability to add into your current

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Rob McEwen
If I move away from eWall I will be left with just iMail till I find something else (purpose of my email). iMail has URL blacklists. eWall has URI Blacklists but I'm still looking for that perfect client to put in-front of my mail server (software based). So you probably have some good

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Rob McEwen
Steve, If at all possible, I recommend blocking based on unknown user BEFORE doing ANY content filtering of the message. But, if you must, it is also a good strategy to block based on the sender's IP first. (I'm figuring that you might need to do that since you are trying to reduce mail to

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Matt
Steve, Since this hasn't yet been mentioned, try Alligate (www.alligate.com). It does selective greylisting (only greylists things that look spammy), and also will validate your users' addresses and do things like country blocking/tarpitting/greylisting. Only one zombie spammer survives

[sniffer] Re: Sniffer Helper App?

2008-07-01 Thread Mxuptime.com
Community Subject: [sniffer] Re: Sniffer Helper App? I MOVED FROM Imail 8 to SmarterMail 4.3 and then 5.1, best thing I ever did ( the cost of an Imail maintenance contract for Enterprise unlimited users / domains). SmarterMail has grey listing built in so 90-95% spam gets killed at source

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pi-Web - Frank Jensen
Make a bat fil like this: -- @echo off echo syntax batfilenavn.bat messagefil to test SNFclient.exe %1 echo %errorlevel% pause -- If it display zero the message is clean. Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) If I am in a

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
Hello Shawn, Thursday, January 10, 2008, 2:16:24 PM, you wrote: Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) snip/ But how do I get the result code for the spam message to output back to the command prompt? If I try to call

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
Hello Shawn, Following up a bit... Most likely you're using a Process object to call the SNFClient. If I've read the MS docs correctly you will want to get the "exit code" once SNFClient finishes. http://msdn2.microsoft.com/en-us/library/system.diagnostics.process.exitcode(VS.71).aspx

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Shawn Park
Pete, That is exactly what I needed. You rock. Thanks so much. Shawn On Jan 10, 2008 11:56 AM, Pete McNeil [EMAIL PROTECTED] wrote: Hello Shawn, Following up a bit... Most likely you're using a Process object to call the SNFClient. If I've read the MS docs correctly you will want

[sniffer] Re: Sniffer codes

2007-11-09 Thread Colbeck, Andrew
The Ugly value returned by the beta Message Sniffer you're using with the Good, Bad and Ugly database has a result code of 40, and this code is missing from your list. (The White value overlaps with result code 0, which internally to Message Sniffer will mask any other spam result code on your

[sniffer] Re: Sniffer as passthrough filter

2007-03-15 Thread Jay Sudowski - Handy Networks LLC
on a domain and then forwarding all the mail to a remote system. -Jay -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Thursday, March 08, 2007 11:44 PM To: Message Sniffer Community Subject: [sniffer] Re: Sniffer as passthrough filter

[sniffer] Re: Sniffer as passthrough filter

2007-03-08 Thread John T (lists)
Yes, it is called email gateway service and many of us do that and it is fairly straightforward to setup but there are a number of steps. John T -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of K Mitchell Sent: Thursday, March 08, 2007 6:16 PM

[sniffer] Re: Sniffer White List

2006-12-12 Thread Colbeck, Andrew
Serge, what return value are you using for this snifferwhitelist? The official and current list of return codes is here: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetai ls.ResultCodes If you're using 0, then don't do that, because zero is also used for no result.

[sniffer] Re: Sniffer White List

2006-12-12 Thread Serge
Community sniffer@sortmonster.com Sent: Tuesday, December 12, 2006 7:49 PM Subject: [sniffer] Re: Sniffer White List Serge, what return value are you using for this snifferwhitelist? The official and current list of return codes is here: http://kb.armresearch.com/index.php?title

[sniffer] Re: Sniffer White List

2006-12-12 Thread Serge
posted this before getting pete's post please disregard - Original Message - From: Serge [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Tuesday, December 12, 2006 8:11 PM Subject: [sniffer] Re: Sniffer White List I'm using 000, isnt that right

[sniffer] Re: [sniffer]Re[2]: [sniffer]WeightGate source, just in case...

2006-06-08 Thread Pete McNeil
Hello Pete, Thursday, June 8, 2006, 9:41:55 AM, you wrote: It does look a little weird. Sometimes it's normal though. I'll see if I can identify anything odd in the settings. _M I've changed the settings. I hope this response works ok. _M Testing. Sorry for the extra trafic - only way

[sniffer] Re: [sniffer]Re[2]: [sniffer]WeightGate source, just in case...

2006-06-08 Thread Pete McNeil
Hello Pete, Thursday, June 8, 2006, 9:42:42 AM, you wrote: Hello Pete, Thursday, June 8, 2006, 9:41:55 AM, you wrote: It does look a little weird. Sometimes it's normal though. I'll see if I can identify anything odd in the settings. _M I've changed the settings. I hope this response

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Darin Cox
Thunderbird and Netscape just takes the full original source and attaches it as a message/rfc822 attachment. I forwarded this message back to the list by just pressing Forward. Interesting that they include the headers with a simple forward, without specifying forward as attachment. I haven't

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Matt
Darin, Thunderbird allows you to choose the default forwarding method as either inline or as attachment. It might actually default to inline, I can't remember, but whenever it does message/rfc822 attachments, it is as a whole unlike some other clients that edit it down to the bare minimum of

[sniffer] Re: [sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-08 Thread Pete McNeil
Hello Andrew, Thursday, June 8, 2006, 11:32:47 AM, you wrote: Ditto. I advise people to use Insert, Item. Far easier than explaining how to drag and drop (or tie shoelaces). It might be nice to have a SnagIt of that process to share w/ users. I've noticed that whether the headers survive

[sniffer] Re: [sniffer]Re[2]: [sniffer]WeightGate source, just in case...

2006-06-08 Thread Matt
Pete, My understanding was that Declude treats different arguments to an executable as just being other forms of that executable so it only processes it once. I'm not positive one way or another. It's worth testing though. Matt Pete McNeil wrote: Hello Matt, Wednesday, June 7, 2006,

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
Subject: Re: [sniffer]FP suggestions Pete,Regarding suggestions for easing the reporting process, I would recommend the following possible modifications: 1) An E-mail submission tool similar to the one now, but replies would be automated2) Send back links or rather an HTML form with checkboxes

Re: [sniffer]Re[2]: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
Hi Pete, Can I interpret this as email address and matching source IP are sufficient if the correct email address is used to submit? If not, do you have any suggestions on how you would like to see us inserting the license ID in the D file? Darin. - Original Message - From: Pete

Re: [sniffer]Re[2]: [sniffer]FP suggestions

2006-06-07 Thread Matt
Pete, An X-Header would be very, very nice to have. I understand the issues related to waiting to see if something comes through, and because of that, I would maybe suggest moving on your own. Sniffer doesn't need to be run on every single message in a Declude system. Through weight based

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
- Original Message - From: Scott Fisher To: Message Sniffer Community Sent: Wednesday, June 07, 2006 10:08 AM Subject: Re: [sniffer]FP suggestions For me the pain of false positives submissions is the research that happens when I get a "no rule found" return. I then need

Re: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]FP suggestions

2006-06-07 Thread Colbeck, Andrew
(sniff) Aw, cut it out, Matt. You're making me all weepy. p.s. Pete, that's pretty darned amazing! From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Wednesday, June 07, 2006 3:58 PMTo: Message Sniffer CommunitySubject: Re: [sniffer]Re[2

Re: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
Awesome. Great job, Pete. Darin. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Wednesday, June 07, 2006 6:49 PM Subject: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]FP suggestions Hello Matt,

Re: [sniffer]Re[2]: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
Unfortunately, by the time the message gets to us it is sometimes just different enough that the original pattern cannot be found. There are some folks who consistently have success, and some who occasionally have problems, and a few who always have a problem. Different in what way? Is the mail

Re: [sniffer]FP suggestions

2006-06-07 Thread Darin Cox
ast, within 24 hours. Darin. - Original Message - From: Matt To: Message Sniffer Community Sent: Wednesday, June 07, 2006 11:46 PM Subject: Re: [sniffer]FP suggestions Darin,Outlook will strip many of the headers when forwarding. Outlook Express needs to forward the messages using &qu

[sniffer][Fwd: Re: [sniffer]FP suggestions]

2006-06-07 Thread Matt
ge - From: Matt To: Message Sniffer Community Sent: Wednesday, June 07, 2006 11:46 PM Subject: Re: [sniffer]FP suggestions Darin,Outlook will strip many of the headers when forwarding. Outlook Express needs to forward the messages using "Forward As Attachment" in order to in

Re: [sniffer]Concerned about amount of spam going through

2006-06-06 Thread David Waller
I only see Sniffer catching about 30% of SPAM and that's the highest it's ever been. David -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Michiel Prins Sent: 06 June 2006 08:11 To: Message Sniffer Community Subject: [sniffer]Concerned about

Re: [sniffer]AW: [sniffer]AW: [sniffer]Concerned about amount of spam going through

2006-06-06 Thread David Waller
Community [mailto:[EMAIL PROTECTED] Im Auftrag von David Waller Gesendet: Dienstag, 6. Juni 2006 11:51 An: Message Sniffer Community Betreff: Re: [sniffer]AW: [sniffer]Concerned about amount of spam going through Of all SPAM identified SNIFFER is finding about 30%. We see an awful lot of junk

Re: [sniffer]Numeric spam

2006-06-06 Thread Pete McNeil
Hello Markus, Tuesday, June 6, 2006, 3:27:32 AM, you wrote: Mabe people at Sniffer are already aware of this new type of spam. Not the malformed mailfrom one but this with the short number and nothing else in subject and body) Thanks for those samples... I've coded an additional abstract for

Re: [sniffer]A design question - how many DNS based tests?

2006-06-06 Thread Peer-to-Peer (Support)
Hi _M, Do you mean like reverse PTR records, or HELO lookups, etc..? --Paul R. -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Tuesday, June 06, 2006 9:26 AM To: Message Sniffer Community Subject: [sniffer]A design question - how

Re: [sniffer]A design question - how many DNS based tests?

2006-06-06 Thread Nick Hayer
Hi Pete, Pete McNeil wrote: How many DNS based tests do you use in your filter system? approx 100 How many of them really matter? depends :) I generally weight them all very low; its the combination of several that make each 'matter'. As I review held mail I remove ones that are

Re: [sniffer]Concerned about amount of spam going through

2006-06-06 Thread Pete McNeil
Hello Michiel, Tuesday, June 6, 2006, 3:10:52 AM, you wrote: Crew,   I'm a bit concerned about the amount of spam that Sniffer's not getting. It used to be a near 99% catch rate, but now it looks like it's down to 70%...?   I opened my own mailbox this morning and saw

Re: [sniffer]Numeric spam topic change to png stock spam

2006-06-06 Thread Nick Hayer
Hi Markus - Markus Gufler wrote: There is also another type of spam (stock spam now with attached png image) this morning passing our filters. I am catching these fairly easily - a combo filter - #combo-stockspammer-png.txt SKIPIFWEIGHT26 TESTSFAILEDENDNOTCONTAINS

Re: [sniffer]Re[2]: [sniffer]Numeric spam topic change to png stock spam

2006-06-06 Thread Nick Hayer
Pete McNeil wrote: Hello Nick, What is your false positive rate with that pattern? Hmm lets go to the MDLP for yesterday :) SS HH HS SH SA SQ REGEX.STOCK.BODY 331 0 0 66 0.667506 0.445565 COMBO.STOCK_PNG 16 0 0 1 0.882353 0.778547 The regex alone will fp; I

Re: [sniffer]A design question - how many DNS based tests?

2006-06-06 Thread Scott Fisher
I use about 100 dnsbl/rbl/rhsbl list of varying weights and reliabilities. How many matter... I'd have to say the shining star is CBL. Hits 45% of the spam with a very low false positive rate. The relay RBLs days are way behind them, The proxy RBLs most useful days are behind them The DUL RBLs

Re: [sniffer]Numeric spam

2006-06-06 Thread Steve Guluk
We're getting the same and today it started hitting a different account (Domain).What are these things? I thought exploratory, maybe looking for replies to build a DB for a later spam wave? Their not malicious in content and look like someone's virus working incorrectly. But, I doubt they are

Re: [sniffer]AW: [sniffer]AW: [sniffer]Concerned about amount of spam going through

2006-06-06 Thread Colbeck, Andrew
your sniffer-id!) Markus -Ursprüngliche Nachricht- Von: Message Sniffer Community [mailto:[EMAIL PROTECTED] Im Auftrag von David Waller Gesendet: Dienstag, 6. Juni 2006 11:51 An: Message Sniffer Community Betreff: Re: [sniffer]AW: [sniffer]Concerned about amount

Re: [sniffer]A design question - how many DNS based tests?

2006-06-06 Thread Colbeck, Andrew
I use just shy of 60 DNS based tests against the sender, both IP4R and RHSBL. Perhaps 10-12 matter. Due to false positives, I rate most of them relatively low and have built up their weights as a balancing act. That act is greatly assisted by using a weighting system and not reject on first

Re: [sniffer]Re[2]: [sniffer]Numeric spam topic change to png stock spam

2006-06-06 Thread Jonathan Hickman
] To: Message Sniffer Community sniffer@sortmonster.com Sent: Tuesday, June 06, 2006 10:05 AM Subject: Re: [sniffer]Numeric spam topic change to png stock spam Hi Markus - Markus Gufler wrote: There is also another type of spam (stock spam now with attached png image

Re: [sniffer]Numeric spam

2006-06-06 Thread Steve Guluk
On Jun 6, 2006, at 7:51 AM, Steve Guluk wrote:We're getting the same and today it started hitting a different account (Domain).What are these things? I thought exploratory, maybe looking for replies to build a DB for a later spam wave? Their not malicious in content and look like someone's virus

Re: [sniffer]Numeric spam

2006-06-06 Thread Colbeck, Andrew
ge Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Steve GulukSent: Tuesday, June 06, 2006 3:46 PMTo: Message Sniffer CommunitySubject: Re: [sniffer]Numeric spam On Jun 6, 2006, at 7:51 AM, Steve Guluk wrote: We're getting the same and today it started hitting a diffe

Re: [sniffer]Numeric spam

2006-06-06 Thread John Carter
. Andrew 8) _ From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Steve Guluk Sent: Tuesday, June 06, 2006 3:46 PM To: Message Sniffer Community Subject: Re: [sniffer]Numeric spam On Jun 6, 2006, at 7:51 AM, Steve

Re: [sniffer]Numeric spam

2006-06-06 Thread Computer House Support
this type of junkmail? Michael SteinComputer House - Original Message - From: Colbeck, Andrew To: Message Sniffer Community Sent: Tuesday, June 06, 2006 7:37 PM Subject: Re: [sniffer]Numeric spam Both of which are reasonable, particularly given the recent Blue

Re: [sniffer]Numeric spam

2006-06-06 Thread Darin Cox
Sent: Tuesday, June 06, 2006 8:07 PM Subject: Re: [sniffer]Numeric spam I thought that having an SPF record would prevent a spammer from forging your domain name, but our SPF record did not seem to help with these odd numeric E-mails which appear to be coming from our owndomain. Does anyone

Re: [sniffer]Numeric spam

2006-06-06 Thread Computer House Support
Hi Darin, Thanks for your reply. Sure wish I understood what you're saying Michael SteinComputer House - Original Message - From: Darin Cox To: Message Sniffer Community Sent: Tuesday, June 06, 2006 8:10 PM Subject: Re: [sniffer]Numeric spam They do

Re: [sniffer]SPF

2006-06-06 Thread Darin Cox
e Sniffer Community Sent: Tuesday, June 06, 2006 9:30 PM Subject: Re: [sniffer]Numeric spam What do you use for spam filtering? Declude has the ability to test SPF, for example. Also, what is your SPF record for the domain in question? Darin.

Re: [sniffer]Sniffer updates down?

2006-06-02 Thread Chuck Schick
John: We are able to download updates fine. Could be some routing issues. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, June 02, 2006 3:23 PM To: Message

Re: [sniffer]Sniffer updates down?

2006-06-02 Thread Shaun Sturby, MCSE Optrics Engineering
Connecting to www.sortmonster.net[207.97.229.114]:80... connected. As of 1 minute ago. Shaun Sturby, MCSE Manager - Technical Services Optrics Engineering - Solution Partners Network Specialists Email: [EMAIL PROTECTED] Website: www.Optrics.com United States: 1740 S 300 West #10

Re: [sniffer]Sniffer updates down?

2006-06-02 Thread Goran Jovanovic
Hi John, I got my Sniffer update at 5:03 pm no problem from Toronto Goran Jovanovic Omega Network Solutions -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, June 02, 2006 5:23 PM To: Message Sniffer Community Subject:

Re: [sniffer]Sniffer updates down?

2006-06-02 Thread John T (Lists)
find! -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, June 02, 2006 3:57 PM To: Message Sniffer Community Subject: Re: [sniffer]Sniffer updates down? Hi John, I got my Sniffer update at 5:03 pm no problem

Re: [sniffer]Sniffer updates down?

2006-06-02 Thread Pete McNeil
Hello John, Friday, June 2, 2006, 5:22:45 PM, you wrote: I am getting errors since late last night that host can not be found. I checked your license record and finding no problems successfully downloaded your rulebase file from the expected URL. Not sure what could be going on but it seems

Re: [sniffer]Viagra Spam

2006-05-31 Thread Pete McNeil
Hello Ali, Wednesday, May 31, 2006, 2:44:28 AM, you wrote: How is everyone managing to deal with the upsurge of viagra spam mail. Sniffer does not seem to pick it up? Just so you know we are on this... There are a set of abstracts coded and we are collecting domain on this one as well. It is

Re: [sniffer]Spam Storm - It's a big one.

2006-05-26 Thread Bonno Bloksma
Hi Pete, Watch out for today's spam storm -- it's a lot bigger than we've seen in a long while. 48 hour image attached. This has low priority but. I've tried to find a live version of that graph you've sent but I cannot find it at

Re: [sniffer]Possible Paypal Phishing

2006-05-24 Thread John T (Lists)
Disregard my last post. John T eServices For You Seek, and ye shall find! -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, May 24, 2006 9:38 AM To: Message Sniffer Community Subject: Re: [sniffer]Possible

Re: [sniffer]Possible Paypal Phishing

2006-05-24 Thread Jay Sudowski - Handy Networks LLC
-Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, May 24, 2006 12:38 PM To: Message Sniffer Community Subject: Re: [sniffer]Possible Paypal Phishing It's really from PostDirect.com aka YesMail.com ... You can tell that it's

Re: [sniffer]Possible Paypal Phishing

2006-05-24 Thread John T (Lists)
: Re: [sniffer]Possible Paypal Phishing The owner of a domain need not authorize a reverse DNS PTR record in any way, shape or form. If the netblock was owned, or the netblock owner had delegated rDNS to a malicious customer, they could easily set rDNS to whatever they wanted. Aol.com

Re: [sniffer]Possible Paypal Phishing

2006-05-24 Thread John T (Lists)
:38 AM To: Message Sniffer Community Subject: Re: [sniffer]Possible Paypal Phishing It's really from PostDirect.com aka YesMail.com ... You can tell that it's authorized because the reverse DNS which ends in PayPal.com (ok, that does set off alarm bells when it's someone else's netblock

Re: [sniffer]Possible Paypal Phishing

2006-05-24 Thread Colbeck, Andrew
: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Wednesday, May 24, 2006 9:45 AM To: Message Sniffer Community Subject: Re: [sniffer]Possible Paypal Phishing But how is PayPal's DNS involved in this as at what point are the Paypal DNS servers queried

Re: [sniffer]spam storm

2006-05-23 Thread Greg Birdsall
Nothing too out of the ordinary here - ~17,000 blocked messages between 10-11 AM EST. Yesterday same time frame was ~16,000. - greg -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Computer House Support Sent: Tuesday, May 23, 2006 10:35 AM To:

Re: [sniffer]spam storm

2006-05-23 Thread John Carter
For a couple days I have seen a increase in general spam (lots of male enhancements), but particularly Nigerian letters. John C -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Computer House Support Sent: Tuesday, May 23, 2006 9:35 AM To: Message

Re: [sniffer]spam storm

2006-05-23 Thread Pete McNeil
Tuesday, May 23, 2006, 10:35:01 AM, you wrote: Dear Sniffer Friends, Our servers are really getting slammed with spam. Is anyone else seeing a hugh spam storm right now? Hello Michael Sniffer Folks, http://reports.messagesniffer.com/Performance/FlowRates.jsp Logs since about 0523.0100

Re: [sniffer]possibly moving to new os

2006-05-20 Thread Pete McNeil
Hello steve, Saturday, May 20, 2006, 4:51:10 PM, you wrote: Hi,   We are a current Imail/sniffer/declude customer.    We are thinking of moving away from our current Imail setup to one using postfix.    I downloaded the 30 trial.  Is it possible to transfer

Re: [sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Computer House Support
We have not noticed any today. Michael Stein Computer House - Original Message - From: Jim Matuska Jr. [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Wednesday, May 17, 2006 2:46 PM Subject: [sniffer]Ebay Phishing Emails getting through Has anyone else

Re: [sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Daniel Bayerdorffer
I've gotten one myself. The pharmacy ones, are still coming through too for that matter. -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Herb Guenther Sent: Wednesday, May 17, 2006 3:03 PM To: Message Sniffer Community Subject: Re

Re: [sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Pete McNeil
Hello Jim, Wednesday, May 17, 2006, 2:46:48 PM, you wrote: Has anyone else been getting an excess amount of ebay phishing emails making it through sniffer today? I have personally received a couple of them and have multiple users reporting the same. I have forwarded them to the sniffer

Re: [sniffer]Ebay Phishing Emails getting through

2006-05-17 Thread Colbeck, Andrew
: Wednesday, May 17, 2006 12:53 PM To: Message Sniffer Community Subject: Re: [sniffer]Ebay Phishing Emails getting through Hello Jim, Wednesday, May 17, 2006, 2:46:48 PM, you wrote: Has anyone else been getting an excess amount of ebay phishing emails making it through sniffer today? I have

RE: [sniffer] Test

2006-05-16 Thread John T (Lists)
Pong John T eServices For You Seek, and ye shall find! -Original Message- From: sniffer@sortmonster.com [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, May 15, 2006 10:12 PM To: sniffer@sortmonster.com Subject: Test Hello sniffer, Just testing. --

Re: [sniffer] Test

2006-05-16 Thread Nick Hayer
pong... Pete McNeil wrote: Hello sniffer, Just testing. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html

Re: [sniffer] Test

2006-05-16 Thread Sharon . Daniels
Message received... Sharon Portage College |-+-- | | Pete McNeil| | | [EMAIL PROTECTED]| | | search.com| | | Sent by: | | | [EMAIL

Re: [sniffer] zipping log files

2006-05-12 Thread Roger Moser
On February 9, 2006 Pete wrote: I expect to be able to accept compressed log files within the next few days if all goes as planned. I will announce that ability on this list when we are ready. Is it possible now? Roger This E-Mail came from the Message Sniffer mailing list. For

Re: [sniffer] zipping log files

2006-05-12 Thread Pete McNeil
Hello Pete, Friday, May 12, 2006, 1:48:00 PM, you wrote: Hello Sniffer Folks, I expect to be able to accept compressed log files within the next few days if all goes as planned. I will announce that ability on this list when we are ready. Is it possible now? Roger Sorry for the odd way

RE: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread Daniel Bayerdorffer
Here too. -- Daniel Bayerdorffer [EMAIL PROTECTED] Numberall Stamp Tool Co., Inc. PO Box 187 Sangerville, ME 04479 USA TEL 207-876-3541 FAX 207-876-3566 www.numberall.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent:

RE: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread Kevin Stanford
buy this stuff from a spam email like that? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Bayerdorffer Sent: Friday, May 05, 2006 9:38 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Lot of Drugs Spam getting through sniffer Here too

RE: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread John A. Back
The more interesting fact is that Outlook's generic spam filter is catching 1 to 7 spam messages per day for me. John Back Baldwin School -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Friday, May 05, 2006 10:34 AM To:

Re: [sniffer] Bad Rule Alert: 963461 follow up.

2006-04-19 Thread Jeff Alexander
Peter, I have taken over the network administration for Neptune Chemical Pump Co. Could I get a manual for the sniffer software. That is how to use set up and confirm it is still configured correctly. Thank you, Jeff Alexander Neptune Chemical Pump Network Administrator - Original

Re: [sniffer] Sniffer application

2006-04-19 Thread Pete McNeil
On Wednesday, April 19, 2006, 11:05:15 AM, Jeff wrote: JA Peter, JA I have taken over the network administration for Neptune Chemical Pump Co. JA Could I get a manual for the sniffer software. That is how to use set up JA and confirm it is still configured correctly. You can find the root

Re: [sniffer] Message loop

2006-04-19 Thread Pete McNeil
On Wednesday, April 19, 2006, 7:20:01 PM, Matt wrote: M M Pete, M M I tried replying to some FP reports and I received back some loop reports from your gateway: M M M M M Failed to deliver to '[EMAIL PROTECTED]' M mail loop: too many hops (too many 'Received:' header fields) I'm

Re: [sniffer] False positive processing

2006-03-21 Thread Darin Cox
- From: Pete McNeil [EMAIL PROTECTED] To: Darin Cox sniffer@SortMonster.com Sent: Tuesday, March 21, 2006 11:21 AM Subject: Re: [sniffer] False positive processing On Tuesday, March 21, 2006, 9:38:46 AM, Darin wrote: DC DC DC Hi Pete, DC DC DC DC Are you getting behind on false positive processing

Re: [sniffer] Updates slow

2006-03-20 Thread Pete McNeil
On Monday, March 20, 2006, 3:58:03 PM, John wrote: JTL It seems today that updates have been slow to retrieve, the last one being JTL averaging 54 Kbps. Updates are triggered on the e-mail update notice. I just retrieved your rulebase at an average of 267K/sec via my DSL. My DL rate is 3Mbps -

RE: [sniffer] New Web Site!

2006-03-17 Thread Tom Baker | BAKERFL
Of Harry Vanderzand Sent: Friday, March 17, 2006 9:15 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] New Web Site! What is a wiki? Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [sniffer] New Web Site!

2006-03-17 Thread John T (Lists)
What is the purpose of using a WIKI site? John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Friday, March 17, 2006 8:07 AM To: sniffer@sortmonster.com Subject: [sniffer] New Web

  1   2   3   4   5   6   7   8   9   10   >