Re: [sniffer] Effectiveness (lately)

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 10:42:40 AM, Jorge wrote: JA Has something happened lately (in the last 24-48 hours). Nothing significant that I can see except for a higher than usual spike in spam through the evening hours last night. JA Normally, I get small amounts (less than 10 a day) of spam

Re[2]: [sniffer] Effectiveness (lately)

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 11:48:58 AM, John wrote: JTL I have also noticed an increase in the amount of spam that got through, JTL mainly on gatewayed domains. I did forward a bunch in the last 18 hours, JTL hopefully that will help. What's interesting is that we're not seeing the increase in

[sniffer] FIN File

2004-07-29 Thread Keith Johnson
I found a .fin file in my sniffer directory and didn't know if anyone knew what it was and how it is produced. It is dated several days ago. Thanks for the aid. Keith This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

RE: [sniffer] FIN File

2004-07-29 Thread Landry William
It's an orphan, you can safely delete it. Bill -Original Message- From: Keith Johnson [mailto:[EMAIL PROTECTED] Sent: Thursday, July 29, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [sniffer] FIN File I found a .fin file in my sniffer directory and didn't know if anyone knew what it

Re[6]: [sniffer] Effectiveness (lately)

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 1:23:11 PM, John wrote: JTL Would the new attached fall under the same rule? Yes. It looks like the same domain is involved. I've launched a compile of your rulebase - you should be updated very quickly. In this case it seems that you started receiving these a few

Re: [sniffer] FIN File

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 1:28:45 PM, Keith wrote: KJ I found a .fin file in my sniffer directory and didn't know if anyone KJ knew what it was and how it is produced. It is dated several days ago. KJ Thanks for the aid. An orphaned .FIN file represents a message scan that was completed by a

Re[8]: [sniffer] Effectiveness (lately)

2004-07-29 Thread Pete McNeil
On Thursday, July 29, 2004, 2:52:07 PM, John wrote: JTL Should I continue to forward spam that is not caught then? Always send spam that is not captured to [EMAIL PROTECTED] If these keep coming through even after your update then we need to hunt for why they are not being tagged... If you

RE: Re[6]: [sniffer] Effectiveness (lately)

2004-07-29 Thread Landry William
That's strange, our Exchange server does not strip off any of the Declude headers. Bill -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Thursday, July 29, 2004 11:52 AM To: [EMAIL PROTECTED] Subject: RE: Re[6]: [sniffer] Effectiveness (lately) Should I

RE: Re[6]: [sniffer] Effectiveness (lately)

2004-07-29 Thread John Tolmachoff (Lists)
Let me clarify. On the spam that is gotten through, but is to a non-existent user, which then Exchange creates a NDR and attaches the spam to it, of which I get a copy of the NDR, if I look at the headers of that spam message that is now attached to the NDR, the header lines for all other servers

[sniffer] Reporting Spam

2004-07-29 Thread Tom Norton
Hi I have Alt-N MDaemon 7.1.2 Installed with Message Sniffer. I get any users who find that they have spam in their folder to move it to a public folder called 'Missed Spam'. How can I automatically get MDaemon to send these messages to SortMonster? Thanks Tom Norton Network Manager -

Re[8]: [sniffer] Effectiveness (lately)

2004-07-29 Thread Sanford Whiteman
Let me clarify. On the spam that is gotten through, but is to a non-existent user, which then Exchange creates a NDR and attaches the spam to it, of which I get a copy of the NDR, if I look at the headers of that spam message that is now attached to the NDR, the header lines

Re: [sniffer] Reporting Spam

2004-07-29 Thread Jorge Asch
I have Alt-N MDaemon 7.1.2 Installed with Message Sniffer. I get any users who find that they have spam in their folder to move it to a public folder called 'Missed Spam'. You might want to ask this instead on the Alt-N's mailing lists... you don't have to be specific. Just ask if it's