[sniffer] Re: Integration with Mailenable - Domain Keys

2007-03-19 Thread Bonno Bloksma
Hi,

ErrorLevel is a variable as of Windows 2000 so:

call C:\Program Files\FSI\F-Prot\fpcmd.exe -silent -auto -ai -archive 
-saferemove -disinf -del -append -report=C:\SmarterMail\logs\virusscan.log %1
Set ERR=%ErrorLevel%
IF %ERR% EQU 0 GOTO CLEAN
@REM echo Virus scanned by F-Prot (%ERR%) viruses found %1
MOVE /Y %1 C:\SmarterMail\Viruses
GOTO END
:CLEAN
@REM echo Virus scanned by F-Prot (%ERR%) viruses found  %1
:END

Would work as well, just not on NT4 or lower.


Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer



tio hogeschool hotelmanagement en toerisme 
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED]  / www.tio.nl 
  - Original Message - 
  From: Jay Sudowski - Handy Networks LLC 
  To: Message Sniffer Community 
  Sent: Sunday, March 18, 2007 1:36 AM
  Subject: [sniffer] Re: Integration with Mailenable - Domain Keys


  I really don't see why it wouldn't be possible to do.  Here is the script 
that's used for f-prot:

  -
  SET ERR=0
  call C:\Program Files\FSI\F-Prot\fpcmd.exe -silent -auto -ai -archive 
-saferemove -disinf -del -append -report=C:\SmarterMail\logs\virusscan.log %1
  IF NOT ERRORLEVEL 1 GOTO CLEAN
  IF ERRORLEVEL 1 SET ERR=1
  IF ERRORLEVEL 2 SET ERR=2
  IF ERRORLEVEL 3 SET ERR=3
  IF ERRORLEVEL 4 SET ERR=4
  IF ERRORLEVEL 5 SET ERR=5
  IF ERRORLEVEL 6 SET ERR=6
  @REM echo Virus scanned by F-Prot (%ERR%) viruses found %1
  MOVE /Y %1 C:\SmarterMail\Viruses
  GOTO END
  :CLEAN
  @REM echo Virus scanned by F-Prot (%ERR%) viruses found  %1
  :END
  -

  I think you should be able to modify it so that it calls Sniffer, rather than 
FProt.  %1 is the path to the mail file.  Based upon the error code/return 
code, you could then delete/hold spam detected by Sniffer accordingly. 

  As for SM not having a GUI, it really hasn't be an issue for us...

  -Jay

  -Original Message-
  From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Chris 
Bunting
  Sent: Saturday, March 17, 2007 4:03 PM
  To: Message Sniffer Community
  Subject: [sniffer] Re: Integration with Mailenable - Domain Keys

  The other issue with SmarterMail is it doesn't have any gui.  Which I guess 
isn't a bad thing.  But I sometimes like a gui for certain things.  Also 
Declude seemed very expensive to use with sniffer

  Sent via my BlackBerry
  - Ask me about it!  

  -Original Message-
  From: E. H. \(Eric\) Fletcher [EMAIL PROTECTED]
  Date: Sat, 17 Mar 2007 14:42:43 
  To:Message Sniffer Community sniffer@sortmonster.com
  Subject: [sniffer] Re: Integration with Mailenable - Domain Keys

  Phil / Jay:

  I am also looking at SmarterMail as an addition to or replacement for 
  several IMail servers and looking at calling MessageSniffer from it without 
  Declude because of the Declude bundling of things we don't want or see value 
  in.  While doing a little more reading on the SmarterTools site I saw a link 
  that addresses your discussion on domain keys:

  http://smartermail.exhalus.net/domainkeys/


  Eric

  - Original Message - 
  From: Jay Sudowski - Handy Networks LLC [EMAIL PROTECTED]
  To: Message Sniffer Community sniffer@sortmonster.com
  Sent: Saturday, March 17, 2007 1:43 PM
  Subject: [sniffer] Re: Integration with Mailenable


  Hi Phil -

  Good question.  We integrate Sniffer into SmarterMail via Declude.
  However, SmarterMail does have the capability to run a program against a
  message before it is delivered.  We have some customers that use a batch
  file to call f-prot and get virus scanning integrated into their mail
  server on the cheap.  I believe it would likely be possible to make use
  of the same functionality to call Sniffer directly, and thus avoid
  having to purchase Declude.  I have just never had a need to attempt
  this.

  As for domain keys, I don't believe so.  However, you can setup
  SPFyou're your domains simply by adding the appropriate DNS records to
  said domains zone files.

  -Jay

  -Original Message-
  From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
  Behalf Of Phillip Cohen
  Sent: Friday, March 16, 2007 12:01 PM
  To: Message Sniffer Community
  Subject: [sniffer] Re: Integration with Mailenable


  Jay,

  Thanks for the heads up on Mailenable. I took a look at SmarterMail
  and it looks pretty good. How does it interface with Message Sniffer
  or does it require and external gateway such as EWall? How has
  support been with it and how have they been as far as updates. Also
  does it have domain keys capability and SPF support for sending
  mail to yahoo.com etc...

  Thanks,

  Phil


  At 07:26 PM 3/15/2007, you wrote:
  Stay Away From MailEnable.
  
  There are so many exploits out there for MailEnable, and there are more
  exploits found monthly, if not weekly.  At one particular interval,
  MailEnable had to re-release the same patch several times in the *same*
  week because it kept on not actually fixing the root of the 

[sniffer] Re: SPAM Storm?

2007-03-19 Thread Computer House Support
Is it me, or is there an unbelievable spam storm going on this 
afternoon??


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: SPAM Storm?

2007-03-19 Thread Colbeck, Andrew
... Not in my neck of the network.


Andrew.
 

 -Original Message-
 From: Message Sniffer Community 
 [mailto:[EMAIL PROTECTED] On Behalf Of Computer House Support
 Sent: Monday, March 19, 2007 3:19 PM
 To: Message Sniffer Community
 Subject: [sniffer] Re: SPAM Storm?
 
 Is it me, or is there an unbelievable spam storm going on 
 this afternoon??
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to 
 [EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]
 
 

#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: SPAM Storm?

2007-03-19 Thread greg
Seems like a normal day to me.  Not much getting though but I checked 
the server logs and they are average sized for the day.


At 04:19 PM 3/19/2007, you wrote:

Is it me, or is there an unbelievable spam storm going on this
afternoon??


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]


Thanks, Greg

CoffeyNet/AllureTech   v 307-473-2323
1546 E. Burlington  cell  307-259-7962
Casper, WY  82601  fax 307-237-3709 



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: SPAM Storm?

2007-03-19 Thread K Mitchell
At 06:19 PM 3/19/2007 -0400, Computer House Support wrote:
Is it me, or is there an unbelievable spam storm going on this 
afternoon??

  We got a fairly heavy burst this afternoon originating from an APNIC
210.x.x.x block.



-- 
Kirk Mitchell-General Manager[EMAIL PROTECTED]
Keystone Connect Unlock Your World
Altoona, PA  814-941-5000   http://www.keyconn.net


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]