[sniffer] Re: Yahoo! Email Delivery
It looks like they are grey listing you. That's the return code our grey listing system uses. On our servers that grey list, the first time you try to deliver email from a new address we return the 451 code. You must retry again after 60 seconds, within 24 hours, and your mail will be accepted. Then that email address is white listed for 24hours. I don't recommend grey listing, it will delay email delivery for hours, and some servers will not try back. We use it in particular circumstances. Paul Fuhrmeister [EMAIL PROTECTED] From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan HickmanSent: Thursday, October 26, 2006 9:20 AMTo: Message Sniffer CommunitySubject: [sniffer] Yahoo! Email Delivery We are still getting this error from Yahoo! servers when attempting to send email to people on their domain: Reason: Remote host said: 451 Message temporarily deferred - 4.16.50 I recall others encountering this difficulty. What did you do or what did Yahoo! tell you was the cause? It seems like every message sent to yahoo.com is being bounced with that message. I cannot contact their abuse or support departments because those emails bounce with the same error. Jonathan HickmanCape Lookout Internet Services[EMAIL PROTECTED]
[sniffer] Re: SPAM Problems
David, What sort of database does OFR use adn do you know if the expiration of address's can be edited? thanks dodd - Original Message - From: David Waller [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent: Monday, October 23, 2006 6:14 AM Subject: [sniffer] Re: SPAM Problems Filippo, We had a similar problem. Due to the huge volumes of spam we found our mail server becoming less able to deal with email. Imail/Declude/Sniffer is expensive in processor terms when processing email and we found the best was to pre-process mail filtering using Greylisting (we used Vamsoft in IIS SMTP but others exist). This has dramatically reduced the load on our server and seems to stop the bulk of spammers and mail harvesters Hope this helps. David -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Filippo Palmili Sent: 23 October 2006 10:18 To: Message Sniffer Community Subject: [sniffer] SPAM Problems Hello Pete, since friday our mail server is overwhelmed by a very lot of spam messages. Because of this the spool of my IMail Server gets full and it actually get stuck. Do you have any hint that can help me to fix this problem? Filippo Palmili # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] Re: SPAM Problems
We also use ORF by VamSoft on IIS to pre-process. We do not use the grey listing. We tried it, and it is great at eliminating spam, but it can delay mail for hours, which is a problems for most email users. Instead of grey listing, we have found ORF's tar-pitting very effective. We set some tests at the ORF level, but don't block on them (because there is no weighting). We also have some spam trap email addresses. Fail a test or hit a spam trap and we tar-pit. Instead of sending us 100 spams a minute they can only send one per minute. We can pick up x-records with Declude and not have to re-run the tests on the iMail server, still using Declude to score the messages based on the prior tests. ORF even has a built-in interface for sniffer. It is simpler and preferable to process everything on the iMail server, but when you want to off-load processing to stretch your iMail / Declude investment, this arrangement can do the trick. Paul Fuhrmeister [EMAIL PROTECTED] -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of David Waller Sent: Monday, October 23, 2006 5:15 AM To: Message Sniffer Community Subject: [sniffer] Re: SPAM Problems Filippo, We had a similar problem. Due to the huge volumes of spam we found our mail server becoming less able to deal with email. Imail/Declude/Sniffer is expensive in processor terms when processing email and we found the best was to pre-process mail filtering using Greylisting (we used Vamsoft in IIS SMTP but others exist). This has dramatically reduced the load on our server and seems to stop the bulk of spammers and mail harvesters Hope this helps. David # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED]
[sniffer] help needed
Hi All, We are migrating off of: iMail with MXguard to Smarter Mail with Declude Needless to say we run sniffer and will continue to, but we are having issues getting our filtering to work the way we want it to and would like to find someone to help out as a consultant on the setup to fine tune things Thanks Dodd
RE: [sniffer] Scheduled Updates
I am not sure that I have received any emails today about any updates either. Is there something wrong with the emailing out of updates? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Tuesday, April 20, 2004 2:23 PM To: [EMAIL PROTECTED] Subject: RE: [sniffer] Scheduled Updates I show the latest compile time as 20040420.1644 GMT. I'll check the logs to see if there has been trouble with your update email. Then I will follow up off list. _M At 12:11 PM 4/20/2004, you wrote: Not sure if this is a specific issue but the Sniffer update hasn't updated since Monday at 02:1 BST (British Summer time GMT+1). Are there any issues at the moment? We have this triggered by an email normally. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 19 April 2004 14:24 To: [EMAIL PROTECTED] Subject: Re: [sniffer] Scheduled Updates At 03:33 AM 4/19/2004, you wrote: The following schedule is based on the first letter of your license ID. Schedules are separated by even and odd hours, and are further separated by 4 minutes for each letter within a given hour. Should we use this system also for uploading the log files? We do not appear to have a problem with uploads at this time, but in any case it would be a good idea to organize scheduled tasks in this way to minimize the possibility of a problem. Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Spam storm?
We have also seen some slow downloads here, but we are currently on a 256k connection from CoreComm/Voyager, but we are updating to a full T1 in the next couple of weeks thru someone different. 03/26/04 10:20:37 Fast traceroute sortmonster.com Trace sortmonster.com (216.88.37.62) ... 1 208.15.190.65 0ms0ms0ms TTL: 0 (No rDNS) 2 64.77.152.137 210ms 80ms 150ms TTL: 0 (se1-3-17.rtr0.wb2023.smor.in.voyager.net bogus rDNS: host not found [authoritative]) 3 64.77.152.9 50ms 190ms 150ms TTL: 0 (se3-1-0.rtr0.clmb.in.voyager.net ok) 4 209.212.206.26 421ms 180ms 91ms TTL: 0 (s60.rtr0.ipls.in.voyager.net bogus rDNS: host not found [authoritative]) 5 169.207.224.93 441ms 80ms 130ms TTL: 0 (483.at-0-1-0.rtr0.chcg1.il.voyager.net ok) 6 63.208.138.173 431ms 331ms 290ms TTL: 0 (ge-8-0-513.ipcolo1.Chicago1.Level3.net ok) 7 4.68.112.201220ms 231ms 210ms TTL: 0 (so-7-0-0.bbr1.Chicago1.Level3.net ok) 8 4.68.112.190 90ms 130ms 110ms TTL: 0 (so-8-0.core1.Chicago1.Level3.net ok) 9 209.0.225.2 60ms 50ms 221ms TTL: 0 (uschcg-j20c.savvis.net bogus rDNS: host not found [authoritative]) 10 209.83.222.49 111ms 310ms 281ms TTL: 0 (at-1-2-802.uswash2-01.j20c.savvis.net bogus rDNS: host not found [authoritative]) 11 216.88.33.46440ms 260ms 471ms TTL: 0 (microneil-1.uswash.savvis.net fraudulent rDNS) 12 No Response * * * 13 No Response * * * 14 No Response * * * 15 No Response * * * 16 No Response * * * 17 No Response * * * 18 No Response * * * 19 No Response * * * 20 No Response * * * 21 No Response * * * 22 No Response * * * 23 No Response * * * 24 No Response * * * 25 No Response * * * 26 No Response * * * 27 No Response * * * 28 No Response * * * 29 No Response * * * Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Stanford Sent: Friday, March 26, 2004 10:22 AM To: [EMAIL PROTECTED] Subject: Re: [sniffer] Spam storm? I have notices this week that the download is also slow over here. I am getting around 2.8 to 3 K/s. We also use Wget, and have with no problems,...just slow download speed. Here is my tracert if it helps... U:\tracert www.sortmonster.net Tracing route to www.sortmonster.net [216.88.37.61] over a maximum of 30 hops: 1 3 ms 2 ms 2 ms 10.100.1.1 2 5 ms 3 ms 2 ms 63.145.109.65 3 7 ms 8 ms 9 ms dal-edge-08.inet.qwest.net [63.145.96.117] 4 8 ms 8 ms 8 ms dal-core-01.inet.qwest.net [205.171.25.117] 517 ms 9 ms 8 ms dal-brdr-02.inet.qwest.net [205.171.25.46] 6 9 ms 8 ms 8 ms POS5-2.BR2.DFW9.ALTER.NET [204.255.168.229] 710 ms 8 ms 8 ms 0.so-1-3-0.xl2.dfw9.alter.net [152.63.99.214] 8 8 ms11 ms11 ms 0.so-0-0-0.tl2.dfw9.alter.net [152.63.2.181] 950 ms51 ms52 ms 0.so-5-0-0.tl2.nyc9.alter.net [152.63.0.110] 1053 ms50 ms51 ms 0.so-3-0-0.xl2.nyc1.alter.net [152.63.29.113] 1151 ms51 ms51 ms 0.so-0-0-0.xr2.nyc1.alter.net [152.63.19.97] 1252 ms51 ms51 ms 508.atm7-0.gw8.nyc1.alter.net [152.63.20.1] 1351 ms50 ms51 ms savvis-ny-gw.customer.ALTER.NET [65.194.72.54] 1450 ms51 ms51 ms so-2-0-0.usnycm2-02.j20c.savvis.net [206.129.9.1 ] 1557 ms56 ms56 ms fe2-3-2.uswash2-01.j20c.savvis.net [209.83.222.7 3] 1673 ms80 ms70 ms microneil-1.uswash.savvis.net [216.88.33.46] 17 *** Request timed out. 18 *** Request timed out. 19 *** Request timed out. 20 *** Request timed out. 21 *** Request timed out. 22 *** Request timed out. 23 *** Request timed out. 24 *** Request timed out. 25 *** Request timed out. 26 *** Request timed out. 27 *** Request timed out. 28 *** Request timed out. 29 *** Request timed out. 30 *** Request timed out. Trace complete. At 08:04 AM 03/26/2004, you wrote: At 08:13 AM 3/26/2004, you wrote: I have a Sprint T as well, and have had no download problems using wget on Win2000 aside from periodic slowdowns. Just ran a download this morning and speed never went over 5K. I also have had no bad_matrix instances. I am consistently getting 45K/sec or better
[sniffer] Config When Using Sniffer With Declude...
Hello All, I am running Sniffer with Declude and was wanting to get some ideas on how everyone has Declude setup. Currently I just have the basic setup as follows. SNIFFER external nonzero d:\imail\declude\sniffer2_2\winx\snifferprog.exe sniffer auth 10 0 I hold anything with a weight of 10m therefore anything failing sniffer gets held and reviewed. I was thinking that sniffer had a way to check and see why it failed, but I have not found much on that. I guess I am just not looking in the right place... Anyone give me some hints? Thanks! Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393 This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
