[sniffer] Re: Sniffer does not catch as much as it used to.
Hi Rick, I've found that tuning for spam is a constant process. I am always tweaking settings, changing weights, etc., in response to spam leakage. Just yesterday I spent about 2 hours on it. I (very reluctantly) implemented some phrase filtering, using the filter function in Declude. I've been reluctant to do phrase filtering in the past, just because I'm so scared of false positives, but I was able to work with a phrase list I was pretty sure would be safe. I also increased the weighting of some of the other Sniffer tests we use, specifically the tests that scan for porn, get rich quick and stuff like that. The weighting isn't so high that any one test will cause the message to fail, but I did set it high enough on a few of the Sniffer result codes so that it fails that specific Sniffer test and just one other test, it will fail as spam. It comes down to, IMHO, how much time you want to spend on it, and how vigilant you want to be. I'd much rather spend a few hours a month tweaking settings, than dealing with lusers calling daily because they got an ad for Viagra. :-) I'd be happy to share my config files privately if you think it would help. Good luck! Tom > I just signed my annual renewal for Sniffer but it seems that > it used to > catch lots of the email and now is only catching about 50% of > the email Why > when we are sending in our information does this continue to > happen? We are > getting lots of you won, Pharmacy spelled wrong and nonsense > emails that > sail through both Declude and Sniffer. Between the 2 of them > that is over > $1000 per year for spam/virus/hijack protection that seems > not be happening > like it used to. Any answers as to when we will get relief on these? > > Rick Hogue --- [This E-mail scanned for viruses by Declude Virus] # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
RE: Re[2]: [sniffer] Last chance to renew at the old price!
Are they a valid reseller, sniffer-folks?? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of KevinSent: Wednesday, December 28, 2005 8:00 PMTo: sniffer@SortMonster.comSubject: Re: Re[2]: [sniffer] Last chance to renew at the old price! After posting this, another reseller pm me their renewal rate of $269. I didn't know Sniffer had another reseller besides Declude.Anyways, for those who are interested and want to save money, it's https://www.computerhouse.com/ccsecure.html At 01:21 PM 12/28/2005, you wrote: Can we renew at declude.com since their pricing is $292.50? I assume their prices will increase on Jan 1, 2006 too.This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: Re[2]: [sniffer] Last chance to renew at the old price!
William -- the "gripping (sic)" has to do with the percentage increase, year over year, being exorbitant. I've already stated here, publicly, that we'll probably continue to use the software. What this amounts to, basically, is either past poor business planning (not raising prices for several years) or poor current cash flow forecasting (needing to raise prices an unreasonable amount immediately). And let's not forget, in order to take advantage of the special offer for existing customers, you *must* renew *now* -- not when your current subscription expires. Classic way to raise immediate cash. If your current subscription doesn't end until, say, September, 2006 -- the Sniffer folks will have the use of your cash for nine months before you receive any benefit of the expenditure. CLASSIC emergency cash raise. Like I said, we'll more than likely continue, but I'll pick month to month (which we do now) -- just in case. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Landry, > William (MED US) > Sent: Tuesday, December 27, 2005 5:57 PM > To: sniffer@SortMonster.com > Subject: RE: Re[2]: [sniffer] Last chance to renew at the old price! > > > Thomas, if your company cannot afford the rather small > monetary increase, > and you are running that close to the edge, then maybe you > should not be in > business. I for one am glad to hear the SNF is adding > resources and has > mapped out a list of future feature enhancements. Please > quit your gripping > or take it off list. > > Bill > > -Original Message- > From: Fox, Thomas [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 27, 2005 2:40 PM > To: sniffer@SortMonster.com > Subject: RE: Re[2]: [sniffer] Last chance to renew at the old price! > > Your interpretation of "a bit" as being 50+% is disingenuous > at best, and > thievery at the worst. > > > > -Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > > Sent: Tuesday, December 27, 2005 5:34 PM > > To: Fox, Thomas > > Subject: Re[2]: [sniffer] Last chance to renew at the old price! > > > > On Tuesday, December 27, 2005, 5:14:13 PM, Thomas wrote: > > > > >> -Original Message- > > >> From: [EMAIL PROTECTED] > > >> [mailto:[EMAIL PROTECTED] On Behalf Of > Michael Murdoch > > >> > > >> If you don't feel that's the case, then you > > >> are free to decide if you think otherwise. Thanks and > take care! > > > > FT> EASY FOX TRANSLATION: > > > > FT> "Like it, or lump it." > > > > Translated another way... > > > > We could keep things as they are, stand still while spam generation > > technology advances rapidly, whither away, and die. > > > > OR > > > > We could charge a bit more, accelerate development and make > sure that > > SNF stays out in front and even expands the gap. > > > > I, for one, am not willing to make the first choice, and I > doubt that > > it would be in anyone's best interests - except, perhaps, the > > blackhats. > > > > _M > > > > > > > > This E-Mail came from the Message Sniffer mailing list. For > > information and (un)subscription instructions go to > > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > > > This E-Mail came from the Message Sniffer mailing list. For > information and > (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > -- > - > This message and any included attachments are from Siemens > Medical Solutions > USA, Inc. and are intended only for the addressee(s). > The information contained herein may include trade secrets or > privileged or > otherwise confidential information. Unauthorized review, > forwarding, printing, > copying, distributing, or using such information is strictly > prohibited and may > be unlawful. If you received this message in error, or have > reason to believe > you are not authorized to receive it, please promptly delete > this message and > notify the sender by e-mail with a copy to > [EMAIL PROTECTED] > > Thank you > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: Re[2]: [sniffer] Last chance to renew at the old price!
Your interpretation of "a bit" as being 50+% is disingenuous at best, and thievery at the worst. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Tuesday, December 27, 2005 5:34 PM > To: Fox, Thomas > Subject: Re[2]: [sniffer] Last chance to renew at the old price! > > On Tuesday, December 27, 2005, 5:14:13 PM, Thomas wrote: > > >> -Original Message- > >> From: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] On Behalf Of Michael Murdoch > >> > >> If you don't feel that's the case, then you > >> are free to decide if you think otherwise. Thanks and take care! > > FT> EASY FOX TRANSLATION: > > FT> "Like it, or lump it." > > Translated another way... > > We could keep things as they are, stand still while spam generation > technology advances rapidly, whither away, and die. > > OR > > We could charge a bit more, accelerate development and make sure that > SNF stays out in front and even expands the gap. > > I, for one, am not willing to make the first choice, and I doubt that > it would be in anyone's best interests - except, perhaps, the > blackhats. > > _M > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Last chance to renew at the old price!
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael Murdoch > > If you don't feel that's the case, then you > are free to decide if you think otherwise. Thanks and take care! EASY FOX TRANSLATION: "Like it, or lump it." --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Last chance to renew at the old price!
Yeah, I figured it at about a 50% increase, but I'm not that good at math and figured they were right Goes to show what I know. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Koontz > Sent: Tuesday, December 27, 2005 4:55 PM > To: sniffer@SortMonster.com > Cc: [EMAIL PROTECTED] > Subject: RE: [sniffer] Last chance to renew at the old price! > > Ah-ha! I think I see now. They need the money to buy new > calculators for > their staff! (see below). That said, even if they are right > and it's a 34% > price increase, it is still unheard of from any company I've > ever dealt > with. > > > Michael Murdoch's Calculator: > $325 x 1.34 (34% increase) = $435 > > My GOOD Calculator Says: > $325 x 1.5231 (53% increase) = $495 > > > -----Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Fox, Thomas > Sent: Tuesday, December 27, 2005 3:06 PM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Last chance to renew at the old price! > > See, like I said: "We haven't raised prices in a long time, > we need the > money, like it or lump it." > > We like the product, and will probably keep using it, but > I'll be sure to > extract my 34% price increase through inane tech support > requests, phone > calls, e-mails, etc. > > If there really hasn't been a price increase in 5 years, a > six or seven > percent increase per year makes more sense to me than 34% all > at once. > > Such a huge increase, in such a short period of time, smacks > of "Someone > needs a new Lexus" much more than it does we need to remain a viable > business. > > > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Last chance to renew at the old price!
Might I suggest a visit to: http://www.lexus.com/cpo/ and a graduated price increase over the next two years? A one or two year old Lexus is just as nice as a brand new one, and would be a lot easier on our already strained IT budgets. Thanks, --tlf > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Michael Murdoch > Sent: Tuesday, December 27, 2005 3:57 PM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Last chance to renew at the old price! > > 1) The monthly rate is going to $ 45.00. > > 2) It would be a one year extension to your current subscription and > then your next renewal would be at the new price. For > example, if your > license expires 02/08/2006, your next renewal would be on > 02/08/2007. > > This is offer is completely optional and is available to all existing > customers. > > Thanks, > MM > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] > Sent: Tuesday, December 27, 2005 2:47 PM > To: sniffer@SortMonster.com > Subject: Re: [sniffer] Last chance to renew at the old price! > > 1) what will the monthly rate be after 2005? > > 2) If we where to renew at the current rate, how long will > that rate be > good > for? As you mentioned grandfathered - is this forever or > just one year. > > > > > > > This E-Mail came from the Message Sniffer mailing list. For > information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Last chance to renew at the old price!
real-time wave-front threat detection, and many more... > > It's important to recognize that many of our improvements > don't require > new > software to be installed on the client side since they are delivered > through > rulebase enhancements. Though this often causes our work to go > unnoticed, it > is actually a design feature since it means that your installation > requires > very little maintenance. This translates to lowered > administration costs > and > higher reliability. > > As a result of this "reliability-first" design strategy, it may not > always > be obvious that our service is constantly being improved and > enhanced - > we > never stand still ;-) > > We'd hate to see any of you go, but please do compare us with other > services. > I'm sure that you'll find we're well worth the money, but it's always > good > to keep your options open. In fact, best practice these days for spam > filtering is to use a blended approach that leverages many > services. We > personally encourage that for best results. > > Please let me know if you have any questions. Thank you for your > feedback > and business! > > Sincerely > > Michael Murdoch > The Sniffer Team > ARM Research Labs, LLC > Tel. 850-932-5338 x303 > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Fox, Thomas > Sent: Tuesday, December 27, 2005 1:03 PM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Last chance to renew at the old price! > > I said the same thing, and the response was, basically, > "We haven't raised the price in a long time, we need > the money, like it or lump it." > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Koontz > > Sent: Tuesday, December 27, 2005 1:57 PM > > To: sniffer@SortMonster.com > > Subject: RE: [sniffer] Last chance to renew at the old price! > > > > Pete, why over a 50% increase? That seems rather drastic > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] > > On Behalf Of Pete McNeil > > Sent: Tuesday, December 27, 2005 12:42 PM > > To: sniffer@sortmonster.com > > Subject: [sniffer] Last chance to renew at the old price! > > > > Hello Sniffer folks, > > > > This is just a friendly reminder that prices will be going up > > January 1. > > > > You can add a year to your SNF subscription at the > current price if > > you renew before January 1. > > > > Details are here: > > https://www.armresearch.com/message-sniffer/forms/form-renewal.asp > > > > Thanks, > > _M > > > > Pete McNeil (Madscientist) > > President, MicroNeil Research Corporation Chief SortMonster > > (www.sortmonster.com) Chief Scientist (www.armresearch.com) > > > > > > This E-Mail came from the Message Sniffer mailing list. For > > information and > > (un)subscription instructions go to > > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > > > > > > This E-Mail came from the Message Sniffer mailing list. For > > information and (un)subscription instructions go to > > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > > > This E-Mail came from the Message Sniffer mailing list. For > information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > This E-Mail came from the Message Sniffer mailing list. For > information > and > (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > This E-Mail came from the Message Sniffer mailing list. For > information > and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Last chance to renew at the old price!
Yeah, what he said! > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Koontz > Sent: Tuesday, December 27, 2005 2:42 PM > To: sniffer@SortMonster.com > Cc: 'Pete McNeil' > Subject: RE: [sniffer] Last chance to renew at the old price! > > Thanks for the explaination. While this is all fine and > good, the reality > is that many IT shops are on fixed budgets outside of their > control. I can > justify a 10-15% increase to our CFO, but over 50% will get shot down > immediately. > > The fact that you haven't raised prices in years is noble, > but if you need > additional revenue, you should phase the increases in over a > period of time, > or a modest increase each year. Some customers simply can > not turn up the > cash buckets into over-drive whenever you deem you need a > substantial cash > influx. > > You've got a great product, and I would really hate to lose > it as a tool. > What will the Educational Institution pricing look like? > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Michael Murdoch > Sent: Tuesday, December 27, 2005 2:14 PM > To: sniffer@SortMonster.com > Cc: Pete McNeil > Subject: RE: [sniffer] Last chance to renew at the old price! > Importance: High > > Hi Folks, > > Actually, here is some more detail as to the reasons for the > price increase. > In addition, please bear in mind that that prices haven't > been raised in > approximately 2 years and even with this increase we are priced very > competitively. > > The new feature/benefits and more to come are as follows: > > * In the past 6 months we have more than doubled the number > of updates per > day and we will continue to increase our bandwidth and the > speed of our > updates. > > * We have more than tripled our staff to improve our > monitoring, support, > and rule generation capabilities. Come January, we are again > doubling this > staff as the black-hats have gotten much more sophisticated > and this has > become a 24x7 battle. Even Pete needs to sleep sometimes. :-) > > * We are adding new R&D programs for AFF/419 spam and Malware > mitigation > (many of the results from these projects have already been > implemented). > > * During this next year as part of our continuous improvement > policy we will > continue to roll out new features and enhancements such as > fully automated > reporting, in-band real-time updates, an optimized message processing > pipeline, image and file attachment tagging, advanced header structure > analysis, enhanced adaptive heuristics, improved machine > learning systems, > real-time wave-front threat detection, and many more... > > It's important to recognize that many of our improvements > don't require new > software to be installed on the client side since they are > delivered through > rulebase enhancements. Though this often causes our work to > go unnoticed, it > is actually a design feature since it means that your > installation requires > very little maintenance. This translates to lowered > administration costs and > higher reliability. > > As a result of this "reliability-first" design strategy, it > may not always > be obvious that our service is constantly being improved and > enhanced - we > never stand still ;-) > > We'd hate to see any of you go, but please do compare us with other > services. > I'm sure that you'll find we're well worth the money, but > it's always good > to keep your options open. In fact, best practice these days for spam > filtering is to use a blended approach that leverages many > services. We > personally encourage that for best results. > > Please let me know if you have any questions. Thank you for > your feedback > and business! > > Sincerely > > Michael Murdoch > The Sniffer Team > ARM Research Labs, LLC > Tel. 850-932-5338 x303 > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Fox, Thomas > Sent: Tuesday, December 27, 2005 1:03 PM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Last chance to renew at the old price! > > I said the same thing, and the response was, basically, > "We haven't raised the price in a long time, we need > the money, like it or lump it." > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Koontz > > Sent: Tuesday, December 27, 2005 1:57 PM > > To:
RE: [sniffer] Last chance to renew at the old price!
I said the same thing, and the response was, basically, "We haven't raised the price in a long time, we need the money, like it or lump it." > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Koontz > Sent: Tuesday, December 27, 2005 1:57 PM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Last chance to renew at the old price! > > Pete, why over a 50% increase? That seems rather drastic > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Pete McNeil > Sent: Tuesday, December 27, 2005 12:42 PM > To: sniffer@sortmonster.com > Subject: [sniffer] Last chance to renew at the old price! > > Hello Sniffer folks, > > This is just a friendly reminder that prices will be going up > January 1. > > You can add a year to your SNF subscription at the current price if > you renew before January 1. > > Details are here: > https://www.armresearch.com/message-sniffer/forms/form-renewal.asp > > Thanks, > _M > > Pete McNeil (Madscientist) > President, MicroNeil Research Corporation Chief SortMonster > (www.sortmonster.com) Chief Scientist (www.armresearch.com) > > > This E-Mail came from the Message Sniffer mailing list. For > information and > (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
