[sniffer] Re: All about GBUdb

2007-10-09 Thread John T (lists)
OK, a couple of questions. If an IP is found to be BAD, the website states a non-zero code will be returned. Well, I know that those of us using Declude and using listed return codes other than non-zero will have a problem with this. Can this be set to a specific return code that we can then use

[sniffer] Re: False Positives

2007-10-09 Thread Pi-Web - Frank Jensen
Hi Pete, Actually it is true ;-) http://kb.armresearch.com/index.php?title=Message_Sniffer.FAQ.FalsePositives#What_are_the_guidelines_for_sending_a_False_Positive.3F - Please include your license ID in your message and send the messages from your registered email address. Email from

[sniffer] Re: All about GBUdb

2007-10-09 Thread Pete McNeil
Hello John, Yes. The standard result codes for ugly IPs depend upon the range they fall in (based on their statistics): Ugly in Caution = 40 Ugly in Black = 63 Ugly in Truncate = 20 Note that the black range is identical to hard coded IP rules found in the SNF rulebase. IP rules are no longer

[sniffer] SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Pete McNeil
Hello Sniffer Folks, We have worked through some minor bugs and added some new features. The newest version of the beta is 1.4. http://kb.armresearch.com/index.php?title=Message_Sniffer.GettingStarted.Distributions#NEW_SNF_V2-9_Wide_Beta Please upgrade your snf_engine.xml and SNFServer.exe

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Chris Bunting
Pete, Im a bit confused about the persistasnt mode settings. I don't remember installing a service for my current sniffer installation. I thought it just continued running after the first time it was called by my mail server. With the new release, do I have to install as a service? Thanks, Chris

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Pete McNeil
Hello Chris, Quite a while ago, SNF was based on cellular peer-server technology. Each time your MTA called SNF with a message it would look to see if any other instances were alive and if they were then they would coordinate together to save resources. A bit after that we created a persistent

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Chris Bunting
Ok I guess I had a basic understanding of how the old way and new way works, that makes it much clearer. I hadn't messed with it until now I'm looking at the new version b/c I am getting a lot of spam thru the floodgates lately, more and more. I tried creating a service with srvany but it was

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Richard Lyon
So, two questions Can sniffer now run without Declude or the like on an Imail system? Can the server piece be on a different machine? Thanks! (And if its obvious no, I haven't yet read the documentation on the new sniffer yet) On Oct 9, 2007, at 8:13 PM, Pete McNeil wrote: Hello

[sniffer] timing for production

2007-10-09 Thread Robert Grosshandler
We generally don't do anything system wise during the 4th quarter unless absolutely necessary. 1) If we don't upgrade to production if/when it comes out later this year, will we be ok? 2) Is release to production Q4 event?? # This

[sniffer] Updates to log rotation scripts

2007-10-09 Thread tfox
What updates/file name changes would be necessary for the log rotation scripts? How can we monitor the status of SNF in real time, via the XML pages? Is there such a thing as an XML reader? --- [This E-mail scanned for viruses by Declude Virus]

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Pete McNeil
Hello Chris, Tuesday, October 9, 2007, 8:30:37 PM, you wrote: Ok I guess I had a basic understanding of how the old way and new way works, that makes it much clearer. I hadn't messed with it until now I'm looking at the new version b/c I am getting a lot of spam thru the floodgates lately,

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Pete McNeil
Hello Greg, Tuesday, October 9, 2007, 8:28:57 PM, you wrote: I'm running Win2003server, Imail 8.05 with MXGuard and Sniffer. How do I install the upgraded files? It was a couple years ago when I set this up originally. I read through and it says to rename the executables and put them

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

2007-10-09 Thread Pete McNeil
Hello Richard, Tuesday, October 9, 2007, 8:50:08 PM, you wrote: So, two questions Can sniffer now run without Declude or the like on an Imail system? We have a program that we use on our spamtrap servers to plug SNF directly into IMail, however it is very limited in it's abilities. Can the

[sniffer] Re: timing for production

2007-10-09 Thread Pete McNeil
Hello Robert, Tuesday, October 9, 2007, 8:59:58 PM, you wrote: We generally don't do anything system wise during the 4th quarter unless absolutely necessary. 1) If we don't upgrade to production if/when it comes out later this year, will we be ok? You will be ok, but you won't be having

[sniffer] New SNF2-9b1.4.MDaemon released.

2007-10-09 Thread Pete McNeil
Hello Sniffer Folks, The new MDaemon beta (SNF2-9b1.4.MDaemon.zip) is available here: http://kb.armresearch.com/index.php?title=Message_Sniffer.GettingStarted.Distributions#NEW_SNF_V2-9_Wide_Beta Those of you who have an alpha version running will want to use the following from the new beta: *