I've updated the script (AutoSNF.cmd) which is used to fetch the latest definitions. I've got it scheduled now but want to set up an alias
which invokes the program. I thought I did so properly, but apparently not.
I've got an alias "XYZ" of type "Program" which resolves to:
E:\IMail\declude\SNIFFER\AutoSNF.cmd
The logs show:
20041214 182050 127.0.0.1 SMTP (7550065a00b4ca5e) processing e:\IMAIL\spool\Q7550065a00b4ca5e.SMD
20041214 182050 127.0.0.1 SMTP (7550065a00b4ca5e) [x] toprog E:\IMail\declude\SNIFFER\AutoSNF.cmd e:\IMAIL\spool\tmpEA4.tmp
20041214 182050 127.0.0.1 SMTP (7550065a00b4ca5e) finished e:\IMAIL\spool\Q7550065a00b4ca5e.SMD status=1
But it is not actually running (looking in the SNIFFER folder) and updating the definitions file.
Not having used the Program Aliases before, am I just doing something plain wrong here?
Do you have to do something along the lines of c:\winnt\system32\command.com ___________ ?
Also, on occassion, the AutoSNF.cmd - even when run manually - fails. I think that the ".snf" file may be in use and cannot be
renamed to *.old, allowing the new file to be renamed to *.snf Anyone else see this happening?
Thanks again! We've already seen a huge drop-off in the spam getting through and now that we're live with the
"live" definitions (vs. the demo version) we should see even stronger results.
Chris
At 03:31 PM 12/13/2004, you wrote:
It is done by scheduled batch file, or by trigger using a program alias in Imail. There are instructions on the MessageSniffer site, as well as support from SortMonster.
John Tolmachoff Engineer/Consultant/Owner eServices For You
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Chris Ulrich > Sent: Monday, December 13, 2004 11:17 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Question on SortMonster/MessageSniffer > > Do you have to configure a service with FireDaemon to check every hour or > does it do it automatically by itself? > > > At 01:07 PM 12/13/2004, you wrote: > >Hi, > > > >It's highly recommended. I accounts for 70% of my "hold" weight and it is > >very much on target with very few false positives. > > > >Rules are updated in a "rules" file and I check for updates hourly. > > > >It has really helped with dealing with "new outbreaks" of SPAM before the > >Ips are on various black-lists. > > > >Best Regards > >Andy Schmidt > > > >H&M Systems Software, Inc. > >600 East Crescent Avenue, Suite 203 > >Upper Saddle River, NJ 07458-1846 > > > >Phone: +1 201 934-3414 x20 (Business) > >Fax: +1 201 934-9206 > > > >http://www.HM-Software.com/ > > > > > >-----Original Message----- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED] On Behalf Of Chris Ulrich > >Sent: Monday, December 13, 2004 12:45 PM > >To: [EMAIL PROTECTED] > >Subject: [Declude.JunkMail] Question on SortMonster/MessageSniffer > > > > > >Is anyone using this product as part of their filtering? > > > >http://www.sortmonster.com/MessageSniffer > > > >Any feedback? > > > >Does it download "definition updates" or something similar, or is it purely > >rules based and the only update would be to the program itself? > > > >How would you integrate this in to the config files? > > > >Also, I'm putting together a list of common words/phrases found in SPAM > >that gets through the current filters. Up to about 200, yes, there are > >plenty more. At what point do you take a "serious" performance hit doing > >this? > > > >I'd post the list of words, but I'd probably score about a 400 on > >everyone's filters and you'd never see it anyway! > > > >Thanks > > > >Chris > >Cydian Technologies > > > > > >--- > >[This E-mail scanned for viruses by Declude Virus] > > > >--- > >[This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > >just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > >Declude.JunkMail". The archives can be found at > >http://www.mail-archive.com. > > > >--- > >[This E-mail was scanned for viruses by Declude Virus > >(http://www.declude.com)] > > > >--- > >This E-mail came from the Declude.JunkMail mailing list. To > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >type "unsubscribe Declude.JunkMail". The archives can be found > >at http://www.mail-archive.com. > >--- > >[This E-mail scanned for viruses by Declude Virus] > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
