Re: Re[6]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Since SNF runs before SpamAssasin, I created a filter for SpamAssasin, so if the message was flagged by Sniffer, then SpamAssasin would give it a higher score. That way I don't have to deal with rules for both spam filters, I just interpret SpamAssasin's result score... This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[6]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
On Wednesday, April 20, 2005, 3:49:43 PM, Peer-to-Peer wrote: PtPS> Tip for MDaemon plug-in users. PtPS> Sniffers .cfg file has an option 'not' to scan files larger than 'X'. If PtPS> this option is set than no sniffer headers will be placed into the message PtPS> (if the message is larger than 'X'). PtPS> Beware, if you use MD's Content Filter to instruct where to send messages PtPS> based on sniffer's 'results' as there will be no results if the file is PtPS> never scanned ;) As a follow on to this --- the reason the option exists is because any message that SNF adds headers to must be copied and edited. Large files take a lot of time to rewrite (relatively) and are less likely to be spam. The default value should work for just about everybody, but if you chose to adjust it you may want to think about why it is there as part of the process ;-) _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
On Wednesday, April 20, 2005, 3:36:14 PM, Dave wrote: DK> Pete, I've been using this plugin for the last couple of months and can say DK> it's been rock solid. Nice work! DK> One little feature request though would be to add an option to auto prune DK> the sniffer log file to so many days, or "X" killobytes. I think that would be best handled with external utilities. I'm working on some ideas for that - I don't want to say too much. Most of the time the log file would be rotated out once per day (or more often) and uploaded to us for analysis... Sometimes this happens as part of the update process when an update notification is received. Thanks for the suggestion though - it's good to know what everyone is thinking. I'll put it on the list. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: RE:Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
That will work, we are actually migrating from another email platform so I am doing this from scratch. Is there any way I can set this rule to attach the original spam message to a warning message rather than move it to a separate directory, like you can for the built in spam tests in Mdaemon? Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Peer-to-Peer (Support)" <[EMAIL PROTECTED]> To: Sent: Wednesday, April 20, 2005 2:17 PM Subject: RE:Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo _M i'll try this one, Jim, you will keep all of your Content Filter rules the same 'except' you will disable (or delete) the two Sniffer entries 'Run Message Sniffer' & Add Headers'. Those two functions will be generated from the plug-in. Also, if you are using the results codes (in the Content Filter) you will need to change any instance of "X-SPAM-Msg-Sniffer-Result" TO "X-SortMonster-MessageSniffer-Result" as indicated in the readme.txt file. Paul R -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jim Matuska Sent: Wednesday, April 20, 2005 5:01 PM To: sniffer@SortMonster.com Subject: (DUMP)Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo I meant do I configure actions based on the headers that sniffer returns like in the non plug in version, or does the plugin do this automatically, the documentation for the plug in is kind of vague in comparison to the older version. Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: "Jim Matuska" Sent: Wednesday, April 20, 2005 1:51 PM Subject: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 4:19:48 PM, Jim wrote: JM> Do you configure rules similar to in the previous versions, or by using this JM> as a plug in is there a GUI for configuration. We configure the rulebase the same way we have in the past. Using the plugin is not different from using the command line utility except that the performance is better (faster) and the installation and operation is simpler. The "service/subscription" part of Message Sniffer has not changed. --- We have a GUI web app for the rulebase (we use it every day), however we have discovered through trial and error that a lot of specialized training is required to keep the rulebase working correctly and that one GUI does not suit many users... each group seems to need their own! We are working on plans for some simpler web apps in the future to handle specialized tasks, however that too seems best handled in other ways for the time being. For example, every system that provides automation to their users for false positive handling and custom black-rules seems to do it in their own special way --- so rather than build a web app that doesn't really suit anyone we have adopted the strategy of providing automation tools (such as our XML based REmost SCripted Updater [RESCU] utility) and consulting to integrate each customer's existing or planned automation efforts with their back-end rulebase configuration. These efforts are usually reserved for larger systems such as small ISPs and filtering service providers. As always we want to support any third party efforts to provide automation tools also. So far we haven't seen much in the way of GUI automation, probably for the same reasons we haven't tackled it yet. I think I may have answered more than the base question here - but I'm hoping I've addressed some of the underlying questions. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE:Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
_M i'll try this one, Jim, you will keep all of your Content Filter rules the same 'except' you will disable (or delete) the two Sniffer entries 'Run Message Sniffer' & Add Headers'. Those two functions will be generated from the plug-in. Also, if you are using the results codes (in the Content Filter) you will need to change any instance of "X-SPAM-Msg-Sniffer-Result" TO "X-SortMonster-MessageSniffer-Result" as indicated in the readme.txt file. Paul R -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jim Matuska Sent: Wednesday, April 20, 2005 5:01 PM To: sniffer@SortMonster.com Subject: (DUMP)Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo I meant do I configure actions based on the headers that sniffer returns like in the non plug in version, or does the plugin do this automatically, the documentation for the plug in is kind of vague in comparison to the older version. Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: "Jim Matuska" Sent: Wednesday, April 20, 2005 1:51 PM Subject: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo > On Wednesday, April 20, 2005, 4:19:48 PM, Jim wrote: > > JM> Do you configure rules similar to in the previous versions, or by > using this > JM> as a plug in is there a GUI for configuration. > > We configure the rulebase the same way we have in the past. Using the > plugin is not different from using the command line utility except > that the performance is better (faster) and the installation and > operation is simpler. The "service/subscription" part of Message > Sniffer has not changed. > > --- > > We have a GUI web app for the rulebase (we use it every day), however > we have discovered through trial and error that a lot of specialized > training is required to keep the rulebase working correctly and that > one GUI does not suit many users... each group seems to need their > own! > > We are working on plans for some simpler web apps in the future to > handle specialized tasks, however that too seems best handled in other > ways for the time being. For example, every system that provides > automation to their users for false positive handling and custom > black-rules seems to do it in their own special way --- so rather than > build a web app that doesn't really suit anyone we have adopted the > strategy of providing automation tools (such as our XML based REmost > SCripted Updater [RESCU] utility) and consulting to integrate each > customer's existing or planned automation efforts with their back-end > rulebase configuration. These efforts are usually reserved for larger > systems such as small ISPs and filtering service providers. > > As always we want to support any third party efforts to provide > automation tools also. So far we haven't seen much in the way of GUI > automation, probably for the same reasons we haven't tackled it yet. > > I think I may have answered more than the base question here - but I'm > hoping I've addressed some of the underlying questions. > > _M > > > > > This E-Mail came from the Message Sniffer mailing list. For information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
I meant do I configure actions based on the headers that sniffer returns like in the non plug in version, or does the plugin do this automatically, the documentation for the plug in is kind of vague in comparison to the older version. Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: "Jim Matuska" Sent: Wednesday, April 20, 2005 1:51 PM Subject: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 4:19:48 PM, Jim wrote: JM> Do you configure rules similar to in the previous versions, or by using this JM> as a plug in is there a GUI for configuration. We configure the rulebase the same way we have in the past. Using the plugin is not different from using the command line utility except that the performance is better (faster) and the installation and operation is simpler. The "service/subscription" part of Message Sniffer has not changed. --- We have a GUI web app for the rulebase (we use it every day), however we have discovered through trial and error that a lot of specialized training is required to keep the rulebase working correctly and that one GUI does not suit many users... each group seems to need their own! We are working on plans for some simpler web apps in the future to handle specialized tasks, however that too seems best handled in other ways for the time being. For example, every system that provides automation to their users for false positive handling and custom black-rules seems to do it in their own special way --- so rather than build a web app that doesn't really suit anyone we have adopted the strategy of providing automation tools (such as our XML based REmost SCripted Updater [RESCU] utility) and consulting to integrate each customer's existing or planned automation efforts with their back-end rulebase configuration. These efforts are usually reserved for larger systems such as small ISPs and filtering service providers. As always we want to support any third party efforts to provide automation tools also. So far we haven't seen much in the way of GUI automation, probably for the same reasons we haven't tackled it yet. I think I may have answered more than the base question here - but I'm hoping I've addressed some of the underlying questions. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
On Wednesday, April 20, 2005, 4:19:48 PM, Jim wrote: JM> Do you configure rules similar to in the previous versions, or by using this JM> as a plug in is there a GUI for configuration. We configure the rulebase the same way we have in the past. Using the plugin is not different from using the command line utility except that the performance is better (faster) and the installation and operation is simpler. The "service/subscription" part of Message Sniffer has not changed. --- We have a GUI web app for the rulebase (we use it every day), however we have discovered through trial and error that a lot of specialized training is required to keep the rulebase working correctly and that one GUI does not suit many users... each group seems to need their own! We are working on plans for some simpler web apps in the future to handle specialized tasks, however that too seems best handled in other ways for the time being. For example, every system that provides automation to their users for false positive handling and custom black-rules seems to do it in their own special way --- so rather than build a web app that doesn't really suit anyone we have adopted the strategy of providing automation tools (such as our XML based REmost SCripted Updater [RESCU] utility) and consulting to integrate each customer's existing or planned automation efforts with their back-end rulebase configuration. These efforts are usually reserved for larger systems such as small ISPs and filtering service providers. As always we want to support any third party efforts to provide automation tools also. So far we haven't seen much in the way of GUI automation, probably for the same reasons we haven't tackled it yet. I think I may have answered more than the base question here - but I'm hoping I've addressed some of the underlying questions. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Do you configure rules similar to in the previous versions, or by using this as a plug in is there a GUI for configuration. Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Dave Koontz" <[EMAIL PROTECTED]> To: Sent: Wednesday, April 20, 2005 12:36 PM Subject: RE: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo Pete, I've been using this plugin for the last couple of months and can say it's been rock solid. Nice work! One little feature request though would be to add an option to auto prune the sniffer log file to so many days, or "X" killobytes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, April 20, 2005 1:45 PM To: Jim Matuska Subject: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 1:15:37 PM, Jim wrote: JM> Pete, JM> Should we change the license info in the plugin.cfg file to match JM> our license info or should we wait to do so until the release version comes out? Please go ahead and make the change. The current code is considered to be production ready. Any changes prior to release will be minor additions, and it is likely there will be no changes... that is, unless someone reports a bug ;-) The new plugin is clearly the preferable Message Sniffer implementation for MDaemon. Best, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Tip for MDaemon plug-in users. Sniffers .cfg file has an option 'not' to scan files larger than 'X'. If this option is set than no sniffer headers will be placed into the message (if the message is larger than 'X'). Beware, if you use MD's Content Filter to instruct where to send messages based on sniffer's 'results' as there will be no results if the file is never scanned ;) Paul R -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Wednesday, April 20, 2005 3:30 PM To: Jim Matuska Subject: Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 2:30:25 PM, Jim wrote: JM> Pete, JM> Is there a difference between the normal .snf files I have been downloading JM> and the one for the plugin? I have setup my script to download the .snf JM> file and noticed it is a couple mb's smaller than the included demo .snf JM> file. There is no significant difference. The mdaemon1 file contains some extra rules, but these are not normally needed in production. During the test we wanted to make sure we used the largest valid rulebase file we generate. After the test it will be best to use normal rulebase files. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Pete, I've been using this plugin for the last couple of months and can say it's been rock solid. Nice work! One little feature request though would be to add an option to auto prune the sniffer log file to so many days, or "X" killobytes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, April 20, 2005 1:45 PM To: Jim Matuska Subject: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 1:15:37 PM, Jim wrote: JM> Pete, JM> Should we change the license info in the plugin.cfg file to match JM> our license info or should we wait to do so until the release version comes out? Please go ahead and make the change. The current code is considered to be production ready. Any changes prior to release will be minor additions, and it is likely there will be no changes... that is, unless someone reports a bug ;-) The new plugin is clearly the preferable Message Sniffer implementation for MDaemon. Best, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[4]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
On Wednesday, April 20, 2005, 2:30:25 PM, Jim wrote: JM> Pete, JM> Is there a difference between the normal .snf files I have been downloading JM> and the one for the plugin? I have setup my script to download the .snf JM> file and noticed it is a couple mb's smaller than the included demo .snf JM> file. There is no significant difference. The mdaemon1 file contains some extra rules, but these are not normally needed in production. During the test we wanted to make sure we used the largest valid rulebase file we generate. After the test it will be best to use normal rulebase files. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Pete, Is there a difference between the normal .snf files I have been downloading and the one for the plugin? I have setup my script to download the .snf file and noticed it is a couple mb's smaller than the included demo .snf file. Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: "Jim Matuska" Sent: Wednesday, April 20, 2005 10:45 AM Subject: Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo On Wednesday, April 20, 2005, 1:15:37 PM, Jim wrote: JM> Pete, JM> Should we change the license info in the plugin.cfg file to match our JM> license info or should we wait to do so until the release version comes out? Please go ahead and make the change. The current code is considered to be production ready. Any changes prior to release will be minor additions, and it is likely there will be no changes... that is, unless someone reports a bug ;-) The new plugin is clearly the preferable Message Sniffer implementation for MDaemon. Best, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
On Wednesday, April 20, 2005, 1:15:37 PM, Jim wrote: JM> Pete, JM> Should we change the license info in the plugin.cfg file to match our JM> license info or should we wait to do so until the release version comes out? Please go ahead and make the change. The current code is considered to be production ready. Any changes prior to release will be minor additions, and it is likely there will be no changes... that is, unless someone reports a bug ;-) The new plugin is clearly the preferable Message Sniffer implementation for MDaemon. Best, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo
Pete, Should we change the license info in the plugin.cfg file to match our license info or should we wait to do so until the release version comes out? Jim Matuska Jr. Computer Tech2, CCNA Nez Perce Tribe Information Systems [EMAIL PROTECTED] - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: Sent: Monday, April 18, 2005 3:57 PM Subject: [sniffer] Message Sniffer Plugin for MDaemon Wide Beta & Promo Hello Sniffer folks, For those of you who are MDaemon users and may not know, we have developed a plugin version of Message Sniffer that works on the latest version of MDaemon (v8). The folks on the MDaemon beta list have had access to it for a while now and it has been working well. There are no known bugs at this time :-). You can find the plugin on the MDaemon installation page of our site: http://www.sortmonster.com/MessageSniffer/Installation/MDaemon.html The plugin is VERY, VERY fast and much easier to use than the command line utility. If you are still using the command line utility I highly recommend that you switch to the plugin version right away :-) Now that version 8 of MDaemon is out, it is time to finish testing this new version and to get the word out. To help with testing, we have been providing a fully updated rulebase to our beta testers. To help with this next phase of testing we are making this fully updated license public for MDaemon users who want to try the new plugin!! :-) This will only last until the end of April though ;-) Please help us to get the word out about this -- tell all your MDaemon friends what they have been missing. Most of our customers come from your recommendations and we really appreciate that. Remember to tell your friends to let us know about your help when they purchase Message Sniffer so that we can give you your free month! Every new user makes Message Sniffer more powerful! Thanks for all your help! Best, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
