|
In
IMail/Declude, the IMail system has the message in a file. Declude launches
Message Sniffer as an external test. Message Sniffer reads the file and returns
an evaluation to Declude. Declude then integrates the result of Message Sniffer
with all of the other tests to produce a result based on your
policy.
I
guess this is "you come to the message and scan it"...
In
*nix systems under Postfix, the other scenario is true... that is, the message
is provided to Message Sniffer, scanned, and then optionally sent back into the
system.
Hope
this helps,
_M
Thank you for the info and link. From a transmission standpoint,
when the sniffer test is called, does it send you the message, you scan it,
and then report back. Or do you come to the message and scan it and then
report back. Thank you again, for your time.
Keith Johnson
-----Original Message-----
From: Madscientist
[mailto:[EMAIL PROTECTED]]
Sent: Mon 2/17/2003 9:18 AM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [Declude.JunkMail] Message Sniffer
Information
]-----Original Message-----
]From:
[EMAIL PROTECTED]
][mailto:[EMAIL PROTECTED]]On
Behalf Of Keith Johnson
]Sent: Monday, February 17, 2003 9:01 AM
]To:
[EMAIL PROTECTED]
]Subject: [Declude.JunkMail] Message Sniffer
Information
]
]
]I wanted to gain some advise on using message
sniffer. It seems
]to be (from forum comments) to be an awesome
product. Is the
]message sniffer database of know spammers
kept up on their end and
]the test within declude checks it? Is the
test quick per 10,000
]emails? Thanks for the info.
We
maintain the database continuously and provide multiple updates per
day.
Typical scan times for Message Sniffer are ~140ms per message.
Some systems/messages are much faster, some are a bit slower. (Ranges
between 30ms and 300ms depending on CPU speed and message size).
You
can view live statistics on message flow rates at:
http://www.sortmonster.com/MessageSniffer/Performance/CurrentFlowRates.jsp
Strictly
speaking the database is not for known spammers as much as it is for known
spam patterns, domains, behaviors, etc...
Hope this
helps,
_M
---
[This E-mail was scanned for viruses
by Declude Virus (http://www.declude.com)]
---
This
E-mail came from the Declude.JunkMail mailing list. To
unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe
Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
|
