[sniffer] Re: XYNTService -- Any Problems?

2008-05-09 Thread Pete McNeil
Hello Matt, Friday, May 9, 2008, 5:10:29 PM, you wrote: I'm sure that I don't speak for everyone, but I would tend to avoid third-party service systems, and this would also expose Sniffer to the potential pitfalls of that software. I thought of that -- but given that the

[sniffer] Re: XYNTService -- Any Problems?

2008-05-09 Thread Pete McNeil
Hello Andrew, Friday, May 9, 2008, 5:40:14 PM, you wrote: snip/ Since you, as a the developer, start with XNTService with the source code, http://www.codeproject.com/KB/system/xyntservice.aspx then you can modify it and deploy it any way you want snip/ So it does seem less bad that at

[sniffer] New version: Engine 24, MDPlugin 6

2008-04-25 Thread Pete McNeil
Hello Sniffer Folks, This release is an upgrade more than a bug fix. Replace your SNFServer.exe or snfmdplugin.dll as appropriate. No changes have been made to the configuration file. This version improves memory management in the SNF Engine for improved performance, improves the header

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread David Pearson
Pete, I'm using Mdaemon and my plugin is messing up today. I went ahead and installed the new v2.9rc. I made sure to put my licenseid and auth number in the identity.xml file. Nothing changed because I did a copy and paste. Now when I start MDaemon I receive an error that says: Unable to

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread David Pearson
Sorry - meant this version: SNFv2-9rc5.23.6 -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of David Pearson Sent: Thursday, April 24, 2008 2:43 PM To: Message Sniffer Community Subject: [sniffer] Re: Source distribution corrected re: snf2check

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread Peer-to-Peer (Support)
Check to be certain your .snf rulebase is in the Mdaemon\SNF folder --PTP -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] Behalf Of David Pearson Sent: Thursday, April 24, 2008 2:47 PM To: Message Sniffer Community Subject: [sniffer] Re: Source

[sniffer] Re: Source distribution corrected re: snf2check utility

2008-04-24 Thread Pete McNeil
Hello David, Thursday, April 24, 2008, 2:46:34 PM, you wrote: Sorry - meant this version: SNFv2-9rc5.23.6 A little off topic for this thread. Check that the snfmdplugin.xml is set up correctly - especially, provide full paths. If you still have trouble then send us a note at support@ and

[sniffer] Source distribution corrected re: snf2check utility

2008-04-21 Thread Pete McNeil
Hello Sniffer Folks, The source distribution of the SNF2-9 beta/rc has been corrected. The previous build of the source distribution was missing a compile script. The new build -- just uploaded -- contains a compile script and some minor modifications to the source code so that it can be built

[sniffer] RePost Overview of Upgrade Process from 2.3x SNF to 2-9 (V3) SNF

2008-04-18 Thread Pete McNeil
Hello Sniffer Folks, It turns out that our link to the Mail Archive has been off-line for a bit and I'm still getting questions about the upgrade process so I'm going to re-post the overview we published on 20080411. Here we go: I'm running win2003 with Imail, Mxguard v3.2 and Sniffer 2-3.2. I

[sniffer] Australian Bank Junk Emails

2008-03-08 Thread David Moore
We consistently get Australian banks phising junk emails that sortmonster doesn't seem to pickup can you add the following banks to your rules as banks very rarely send out emails. ANZ Bank WestPac St George National Australia Bank Bank of Queensland Full list here

[sniffer] MXScan for MailEnable

2008-03-07 Thread Pete McNeil
Hello Sniffer Folks, For those of you considering MailEnable, MX Uptime (www.mxuptime.com) has an anti-spam plugin that includes a fully integrated SNFEngine (the new version!). Just put in your login code and authentication string and you're good to go. Here's a screen shot link:

[sniffer] Version 2-9rc1.8.2 Release Candidate (Std Test Package), and other plans/announcements!...

2008-03-07 Thread Pete McNeil
Hello Sniffer Folks, Today I'm releasing the first release candidate for what will become version 3 this quarter! You can find the latest here as it arrives: http://kb.armresearch.com/index.php?title=Message_Sniffer.GettingStarted.Distributions#NEW_SNF_V2-9_Wide_Beta Over the next few days we

[sniffer] Re: Version 2-9rc1.8.2 Release Candidate (Std Test Package), and other plans/announcements!...

2008-03-07 Thread Shawn Park
Pete, Great new features. I can't wait to get this installed. Thanks for the hard work. Shawn On Fri, Mar 7, 2008 at 12:24 PM, Pete McNeil [EMAIL PROTECTED] wrote: Today I'm releasing the first release candidate for what will become version 3 this quarter!

[sniffer] Gateway solution

2008-03-06 Thread David Fletcher
We currently have Sniffer running as a SpamAssassin plugin on a BSD box. This server is acting as a gateway for inbound email and we have been very pleased with the results. We are re-evaluating our setup in light of a lack of BSD/Linux/Unix experience in our staff and are looking for

[sniffer] Re: Gateway solution

2008-03-06 Thread Nick Marshall
We use XWall (www.dataenter.com http://www.dataenter.com/ ) on some of our gateway servers - it's very efficient, but not sure about running Sniffer on there - however, it's no-doubt possible. It's described as a product for feeding into Exchange, but in reality it works with any SMTP server.

[sniffer] Re: Gateway solution

2008-03-06 Thread Pete McNeil
Hello Nick, Thursday, March 6, 2008, 10:25:18 AM, you wrote: We use XWall (www.dataenter.com) on some of our gateway servers its very efficient, but not sure about running Sniffer on there however, its no-doubt possible Its described as a product for feeding into Exchange, but in

[sniffer] AW: [sniffer] Re: Gateway solution

2008-03-06 Thread Hirthe, Alexander
We use NoSpamToday (http://www.nospamtoday.com/download/server/), it's cheap (compared to the other commercial gateways), runs on Windows, has SA integrated, Greylisting and so on. But - no Sniffer. This runs on the IMail one step later :) Alex Von: Message Sniffer Community [mailto:[EMAIL

[sniffer] Re: Gateway solution

2008-03-06 Thread Nick Marshall
Leave it with me. Nick Marshall Giacom World Networks Ltd Tel +44 (0) 870 740 Mobile +44 (0) 7799 060 555 Fax +44 (0) 870 740 7177 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IMPORTANT: Legally privileged/confidential information may be contained in this message. If you are not the

[sniffer] Status screen of SNFServer - What does it mean?

2008-02-29 Thread Shawn Park
Hello, I am using the latest beta of Message Sniffer. Can you please tell me what all of the #''s are on the status screen when SNFServer is running? Obviously M/min is messages per minute, but what do the following mean? SP: LR: [0/13 / 0 ] (the slash spins clockwise here) W: C: B: T: S:

[sniffer] Away from office

2008-02-29 Thread nick . marshall
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list

[sniffer] Away from office

2008-02-29 Thread nick . marshall
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list

[sniffer] Proper way to setup a SNFServer on it's own box

2008-02-27 Thread Shawn Park
Hello, I searched the Wiki but could not find a proper answer to this question. If I have my mail server on it's own server, and I want to have Message Sniffer on it's own server, how would I go about setting this up? I will have the SNFServer instance running on it's own server. Does

[sniffer] Re: Proper way to setup a SNFServer on it's own box

2008-02-27 Thread Pete McNeil
Hello Shawn, Wednesday, February 27, 2008, 2:57:29 PM, you wrote: Hello, I searched the Wiki but could not find a proper answer to this question. If I have my mail server on it's own server, and I want to have Message Sniffer on it's own server, how would I go about setting this up?

[sniffer] Bad Rule Alert - 1771029

2008-02-26 Thread Pete McNeil
Hello Sniffer Folks, Rule ID 1771029 was coded incorrectly for a URL fragment and matched some common dtd reference code. The rule has already been removed but it was posted to some rulebase files before the error was discovered. The rule was created earlier today (2008-02-26 06:00:18) and

[sniffer] Away from office

2008-02-26 Thread nick . marshall
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list

[sniffer] Away from office

2008-02-26 Thread nick . marshall
I'm out of the office until Monday March 3rd. In the meantime, you can contact Richard Hirst at [EMAIL PROTECTED] or call 0870 740 . Thank you # This message is sent to you because you are subscribed to the mailing list

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Colbeck, Andrew
Paul, since you're working in a Windows world, check out Alligate from alligate.com as a Windows platform based email gateway. I've put Alligate in front of my Declude setup and it drastically reduced the number of emails I had scan for content and sender in Declude, and gained back a lot of disk

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Pete McNeil
Hello Paul, Thursday, February 21, 2008, 7:52:55 PM, you wrote: Ie, ideal for processing/serving 10+ million emails per day in an imail/declude/snf configuration. SNF seems to generally be the big processor hog (though the new beta has definitely made huge performance improvements over the

[sniffer] Re: Ideal config for scaleable solution?

2008-02-22 Thread Pete McNeil
Hello Andrew, Friday, February 22, 2008, 4:37:18 AM, you wrote: snip/ If you were a *nix shop, you would still lean towards having a dedicated gateway server (or many) and your CPU hog would be spamassassin, which you would run in a client/server model to shift the CPU usage to other boxes.

[sniffer] Ideal config for scaleable solution?

2008-02-21 Thread Paul Rogers
Ie, ideal for processing/serving 10+ million emails per day in an imail/declude/snf configuration. SNF seems to generally be the big processor hog (though the new beta has definitely made huge performance improvements over the prior version). OK...this is a bit off-topic, but I'm looking for

[sniffer] Message Sniffer Purchase requirment

2008-02-20 Thread Shawn Park
Hello, We have been evaluating Message Sniffer for the past month and are ready to make a purchase, but we have one question. One the order page, it states: Please note that the email address you provide must be on the server that will be using Message Sniffer. What exactly does this mean?

[sniffer] Re: Message Sniffer Purchase requirment

2008-02-20 Thread Shawn Park
Pete. This makes much better sense to me now. Thanks for the quick reply. Shawn On Wed, Feb 20, 2008 at 3:00 PM, Pete McNeil [EMAIL PROTECTED] wrote: Hello Shawn, Wednesday, February 20, 2008, 5:35:03 PM, you wrote: Hello, We have been evaluating Message Sniffer for the past

[sniffer] Updated - did I forgot anything?

2008-02-04 Thread Hirthe, Alexander
Hello, I updated our sniffer on IMail/Declude to 2.9b. I created I new directory, installed sniffer as a service, modified the global.cfg to call the SNFClient, modified the xml files (license, directories). Anything else? It's running and the ID.date.log.xml is growing :) Is this list

[sniffer] Re: Updated - did I forgot anything?

2008-02-04 Thread Pete McNeil
Hello Alexander, Monday, February 4, 2008, 8:40:44 AM, you wrote: Hello, I updated our sniffer on IMail/Declude to 2.9b. I created I new directory, installed sniffer as a service, modified the global.cfg to call the SNFClient, modified the xml files (license, directories). Anything

[sniffer] Anyone on the list using postfix?

2008-02-04 Thread Pi-Web - Frank Jensen
Please let me know, we might be able to help each other... -- Mvh. Frank Jensen [EMAIL PROTECTED] www.pi.dk Imponerende, fascinerende og kæmpe Plakater f.eks. 149 x 149 = 629 kr Vi kan også lave plakat fra dit digitale foto

[sniffer] Re: Anyone on the list using postfix?

2008-02-04 Thread David Fletcher
We are using postfix with amavisd-new/spamassasin on FreeBSD. Haven't touched it in a long time, and I'm up to my eyeballs in other projects right now, so I'm not sure I can be of much help. -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of

[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pi-Web - Frank Jensen
Hi Pete, Just for information, we renamed the msg folder again today, and again SNFClient.exe.err only state: Could Not Connect! /etc/init.d/snfilter stop + /etc/init.d/snfilter start helped. Hello Pi-Web, Sunday, January 27, 2008, 1:16:08 PM, you wrote: Sorry, I might not have been

[sniffer] Re: snfilter - linux - postfix

2008-02-02 Thread Pete McNeil
Hello Pi-Web, Saturday, February 2, 2008, 6:07:19 PM, you wrote: Hi Pete, Just for information, we renamed the msg folder again today, and again SNFClient.exe.err only state: Could Not Connect! /etc/init.d/snfilter stop + /etc/init.d/snfilter start helped. When SNFClient cannot connect

[sniffer] What happens if SNFServer is not running or crashes?

2008-01-29 Thread Shawn Park
Hello. I am using the latest beta version of Message Sniffer. On your Wiki, it states under: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetails.Peer-Server Topic: Can you briefly explain Peer-Server technology? Next, the client instance will load the rulebase itself

[sniffer] Re: snfilter - linux

2008-01-27 Thread Pete McNeil
Hello Pi-Web, Sunday, January 27, 2008, 6:31:15 AM, you wrote: Hi Not sure what we have done - but snfilter has stoped working. The x.200801??.log.xml is not more created. SNFClient.exe.err says: /var/spool/snfilter/msg/20080127122626_4614.msg: Could Not Connect! Messages are put

[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pi-Web - Frank Jensen
Sorry, I might not have been clear. It is on Linux with postfix. Yes stop/start of the service did solve the problem. Before start/stop pstree showed 14*SNFserver.exe SNFClient.exe.err only state: Could Not Connect! Last x.200801??.log.xml ends with: i u='20080125234317'

[sniffer] Re: snfilter - linux - postfix

2008-01-27 Thread Pete McNeil
Hello Pi-Web, Sunday, January 27, 2008, 1:16:08 PM, you wrote: Sorry, I might not have been clear. It is on Linux with postfix. I should have picked that out of the path. ;-) Yes stop/start of the service did solve the problem. Before start/stop pstree showed 14*SNFserver.exe

[sniffer] New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello Sniffer Folks, We have been researching/refining the default ranges for GBUdb. Here are our latest reference settings. These are conservative for large systems (500/min) and should be even more conservative for smaller systems. Smaller systems that experience lower message rates will tend

[sniffer] Re: GBUdb question

2008-01-22 Thread Pi-Web - Frank Jensen
Hi Rob, You can add the IPs to GBUdbIgnoreList.txt if you want sniffer to ignore the IPs. Pete, I have some questions about GBUdb FIRST QUESTION: I have several clients who forward over e-mails from ISP accounts. I have a system whereby I can pick out the original sending server IP. I

[sniffer] Re: GBUdb question

2008-01-22 Thread Pete McNeil
Hello Rob, Tuesday, January 22, 2008, 11:09:10 AM, you wrote: Pete, I have some questions about GBUdb This may help: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetails.GBUdb FIRST QUESTION: I have several clients who forward over e-mails from ISP accounts. I

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread David Waller
Hi, I think I must have missing something or been asleep. I've had a look at the Sniffer site and to be honest I don't fully understand what GBUdb is. I've read the technical details page but I don't see how it fits into the whole scheme of things, if it's useful to me, and if it is, how to

[sniffer] Re: GBUdb question

2008-01-22 Thread Rob McEwen
Pete McNeil wrote: This may help: http://kb.armresearch.com/index.php?title=Message_Sniffer.TechnicalDetails.GBUdb I did read that first. It was helpful. I'll keep referring back. We are developing an auto-drill-down feature for GBUdb to assist in automatically training GBUdb in this way.

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello David, Tuesday, January 22, 2008, 12:43:09 PM, you wrote: Hi, I think I must have missing something or been asleep. I've had a look at the Sniffer site and to be honest I don't fully understand what GBUdb is. I've read the technical details page but I don't see how it fits into the

[sniffer] Re: New reference settings for GBUdb ranges.

2008-01-22 Thread Pete McNeil
Hello David, Ooops, I missed a question... Tuesday, January 22, 2008, 12:43:09 PM, you wrote: snip/ ..., how to implement it. GBUdb is built in to the new version of Message Sniffer. It is turned on by default and the default settings work for just about everybody. If you have any email

[sniffer] Re: GBUdb question

2008-01-22 Thread Pete McNeil
Hello Rob, Tuesday, January 22, 2008, 1:11:00 PM, you wrote: snip... about auto-drill-down/ I'm not confident that this will handle the forwarded messages scenarios that I described, which I have ready custom programmed for the specific narrow range of ways that this currently happens with

[sniffer] Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
Hi We trying to setup snf with postfix. It seems to work - except it does not reject ant messages. The x.20080116.log.xml says: s u='20080116110805' m='20080116120805_22626.msg' code='69' error='ERROR_MSG_FILE'/ This I belive is because the msg file that is send to sniffer has a wrong

[sniffer] Re: Postfix

2008-01-16 Thread Pete McNeil
Hello Pi-Web, ERROR_MSG_FILE means that SNF could not open the file to be scanned. Be sure the you pass the full path of the message file and that permissions are correct so that SNF can open the file. Hope this helps, _M Wednesday, January 16, 2008, 12:31:58 PM, you wrote: No its not the

[sniffer] Re: Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
It seems right - but no go: In /var/spool/snfilter/msg/ -rw--- 1 snfilter snfilter 2965 Jan 16 18:35 20080116183528_10882.msg (deleted after process finished) Result: s u='20080116173528' m='20080116183528_10882.msg' code='69' error='ERROR_MSG_FILE'/ sniffer setup:

[sniffer] Re: Postfix

2008-01-16 Thread Pi-Web - Frank Jensen
Adding $INSPECT_DIR to the $SNIFFER_EXE $AUTHENTICATION $INSPECT_DIR$MSGFILE || { command Now it seems to work. It seems right - but no go: In /var/spool/snfilter/msg/ -rw--- 1 snfilter snfilter 2965 Jan 16 18:35 20080116183528_10882.msg (deleted after process finished) Result: s

[sniffer] Re: Postfix

2008-01-16 Thread Pete McNeil
Hello Pi-Web, Yep. The clue was in the log: m='20080116183528_10882.msg' Note that the path was missing - only the file name was present. Now your logs should look more like: m='/var/spool/snfilter/msg/20080116183528_10882.msg' Best, _M Wednesday, January 16, 2008, 1:23:14 PM, you wrote:

[sniffer] Rule Database copy question

2008-01-16 Thread Shawn Park
Hello, I am using the latest beta version of Message Sniffer. I am asking this question because I thought I read this somewhere but I can not find where I read it. If I copy my rule database file to the c:\snf directory while SNFServer.exeis running, does SNFServer automatically load the new

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Pete McNeil
Hello Shawn, Wednesday, January 16, 2008, 2:26:14 PM, you wrote: Hello, I am using the latest beta version of Message Sniffer. I am asking this question because I thought I read this somewhere but I can not find where I read it. If I copy my rule database file to the c:\snf

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Colbeck, Andrew
It appears that both the reload and the rotate options in the sniffer executable are still accepted by SNFClient.exe but are deprecated, as neither parameter appears in the help or in the contextual help when SNFClient.exe is run without parameters. Andrew.

[sniffer] ERROR_SYNC_FAILED

2008-01-16 Thread Shawn Park
Hello, I am using the latest beta of Message Sniffer. Occasionally in my log file I will see the following entry: e u='20080116022507' context='SNF_NETWORK' code='99' text='ERROR_SYNC_FAILED'/ What causes this and how do I correct it? Thanks, Shawn

[sniffer] Re: Rule Database copy question

2008-01-16 Thread Colbeck, Andrew
Thanks for the response, Pete! I was using both parameters in my scheduled pattern download script, which would tell Sniffer that there was a new pattern, and would rotate the logs before uploading them back to you. With the new (beta) version, both extras have become redundant, so I've

[sniffer] Re: ERROR_SYNC_FAILED

2008-01-16 Thread Pete McNeil
Hello Shawn, Wednesday, January 16, 2008, 4:53:29 PM, you wrote: Thanks for the quick reply Pete. When SNF connects to your SYNC servers, what information/data is it exchanging? The telemetry we receive is roughly equivalent to what you see in your .status.minute. file. In

[sniffer] Re: One line nonsense mail

2008-01-12 Thread Pi-Web - Frank Jensen
Is it possible to add own texts to SNF to include in the contents scan? Eg.: Subject: are unregulated and AND would be. by either the FSA or number of organisations. This way we could react at the first message recived. Hi All, I had like 37 different One line nonsense mail in my account

[sniffer] Re: SNF V2-9b1.5 Released - Please Upgrade

2008-01-12 Thread Harry vanderzand
I do not recall upgrading How can I tell the version that I am running? thanks Harry Vanderzand Intown Internet 11 Belmont Ave. W. Kitchener, ON, N2M 1L2 519-741-1222 -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Saturday,

[sniffer] Re: SNF V2-9b1.5 Released - Please Upgrade

2008-01-12 Thread David Moore
I have a question about GBUdbIgnoreList.txt do I put 192.168.100.1 (which is my server ip) as well as 127.0.0.1 and do I also put my public IP address in this file. Regards David Moore [EMAIL PROTECTED] J.P. MCP, MCSE, MCSE + INTERNET, CNE. www.adsldirect.com.au for ADSL and Internet

[sniffer] Questions about usage

2008-01-11 Thread Richard Lyon
Greetings all, We run a small email server for the company. Basically, for the longest its been install and run, and have all messages that are above a certain weight marked with **SPAM** in the subject line, and sorted to a junk folder by the user's client. The users could then skim this

[sniffer] Sniffer Win32 command line output

2008-01-10 Thread Shawn Park
Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) If I am in a MSDOS Window and I type: SNFClient.exe junkmsg.txt there is a very fast pause and I am returned to the command prompt. I can go into the log and see this: s u='20080110191039' m='junkmsg.txt'

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pi-Web - Frank Jensen
Make a bat fil like this: -- @echo off echo syntax batfilenavn.bat messagefil to test SNFclient.exe %1 echo %errorlevel% pause -- If it display zero the message is clean. Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) If I am in a

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
Hello Shawn, Thursday, January 10, 2008, 2:16:24 PM, you wrote: Hello, I am evaluating Message Sniffer beta version but I am totally confused. :-) snip/ But how do I get the result code for the spam message to output back to the command prompt? If I try to call

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Pete McNeil
Hello Shawn, Following up a bit... Most likely you're using a Process object to call the SNFClient. If I've read the MS docs correctly you will want to get the "exit code" once SNFClient finishes. http://msdn2.microsoft.com/en-us/library/system.diagnostics.process.exitcode(VS.71).aspx

[sniffer] One line nonsense mail

2008-01-10 Thread Pi-Web - Frank Jensen
Hi All, I had like 37 different One line nonsense mail in my account today. (and so did our many of our users). Of cause they are not taken by SNF as almost all are different and from different IP sources. Is it a virus that generates such mails? Or what is the idea? Anyone having luck

[sniffer] Re: Sniffer Win32 command line output

2008-01-10 Thread Shawn Park
Pete, That is exactly what I needed. You rock. Thanks so much. Shawn On Jan 10, 2008 11:56 AM, Pete McNeil [EMAIL PROTECTED] wrote: Hello Shawn, Following up a bit... Most likely you're using a Process object to call the SNFClient. If I've read the MS docs correctly you will want

[sniffer] Kudos

2008-01-09 Thread Robert Grosshandler
Hi All - With the holidays behind us, we upgraded to the it doesn't look like it will ever go gold wide-beta. Followed the directions in the readme to the letter. Worked wonderfully, continues to work wonderfully 24 hours later. We're low volume, but so far no false positives and no

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
Hello Alberto, Friday, January 4, 2008, 4:56:29 PM, you wrote: Hello I got a strong attack today, over thousand messages at the same time!! The usual technique: Impersonate the victim and send to non valid users of one domain of mine!! Changing IP for each message UNBELIEVABLE!! This

[sniffer] Re: I got a strong attack today

2008-01-04 Thread John T (lists)
3) then be able to create a temporary rule to help block messages - must be viable until SNF has an updated ruleset to start clearing out the attack - I don't think declude (what I use w/SNF) has rule expirations (but would be a nice feature) What I do when I create a temp rule is

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pi-Web - Frank Jensen
Hi I got a tool to test all messages in a folder with SNF. All with a non zero result is moved to a spam folder. Its like 84 lines of delphi code. If Pete will host the files I will supply the tool for free including source. Friday, January 4, 2008, 4:56:29 PM, you wrote: Hello I got a

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
Hello Paul, A relatively easy and reliable way to recognize one of these storms is whenever your new SNF engine starts throwing Bs and Cs- That is - you can check the second.stat or minute.stat file for Black and Caution hits: rates c .. m b .. m /rates On most systems Caution and Black

[sniffer] Re: I got a strong attack today

2008-01-04 Thread Pete McNeil
Hello Alberto, Friday, January 4, 2008, 6:50:55 PM, you wrote: Pete Thank you very much for your very exhaustive response! It's what we do. ;-) Do you have any other information on this technology called Gauntlet that seems me very very interesting. There really isn't much more to it

[sniffer] The new version of SNF

2007-12-28 Thread Alberto Santoni
Hello The new version of SNF is released? How much is it stable? Thanks Alberto # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED]

[sniffer] Re: The new version of SNF

2007-12-28 Thread Pete McNeil
Hello Alberto, Friday, December 28, 2007, 2:32:55 PM, you wrote: Hello The new version of SNF is released? How much is it stable? It's not yet officially released, but the current beta (1.5) has been production stable for quite a while now. The official release will wait for a few extra

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread David Moore
How stable is the beta version? Regards David Moore [EMAIL PROTECTED] J.P. MCP, MCSE, MCSE + INTERNET, CNE. www.adsldirect.com.au http://www.adsldirect.com.au/ for ADSL and Internet www.romtech.com.au http://www.romtech.com.au/ for PC sales Office Phone: (+612) 9453 1990 Fax Phone: (+612)

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread Pi-Web - Frank Jensen
We have been running it for - I guess - 2 month now without any trouble. How stable is the beta version? Regards David Moore [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] J.P. MCP, MCSE, MCSE + INTERNET, CNE. www.adsldirect.com.au http://www.adsldirect.com.au/ for ADSL and Internet

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread David Moore
We are using MxGuard, Sniffer, InvURIBL combo on Imail will the beta sniffer still fit with this combination with out issues? Regards David Moore [EMAIL PROTECTED] J.P. MCP, MCSE, MCSE + INTERNET, CNE. www.adsldirect.com.au for ADSL and Internet www.romtech.com.au for PC sales Office Phone:

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread John T (lists)
I have not noticed any increase on FPs on the one server that is running it. John T -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 20, 2007 1:29 PM To: Message Sniffer Community Subject: [sniffer] Re:

[sniffer] Re: Excessive amounts of spam

2007-12-20 Thread Pi-Web - Frank Jensen
We are using sniffer and free tools: yasu (URLBL) and RBLCHECK (DNSBL). URLBL does catch some that sniffer dont. URLBL I think has as low false rate as sniffer - but it does not catch as many as sniffer. DNSBL also (mainly spamcop), but with much more false than sniffer. We have added a IP

[sniffer] Sniffer Update Timeouts

2007-12-12 Thread Christopher Jaime
I'm seeing timeouts and very slow downloads from sniffer today. Is this just me? - Chris -- C:\IMail\Snifferwget -N http://www.sortmonster.net/Sniffer/Updates/user_code.snf -O user_code.new.gz --http-user=sniffer --http-passwd=ki11sp8m

[sniffer] Please send email to r...@bluscs.com

2007-11-29 Thread roconnor
My email address has changed. Please email [EMAIL PROTECTED] # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST

[sniffer] Re: [S][sniffer] Re: Please send email to r...@bluscs.com

2007-11-29 Thread David Payer - IowaLink Administrator
John, it is often less than clear as to how to do that. For example, where is our customer interface to change things? Is that link on the email? Is that link on the armresearch.com page? If you know this to be the case, please show us all. David P. - Original Message - From:

[sniffer] Re: re subscriptions to list

2007-11-29 Thread Pete McNeil
Regarding this thread and to nobody in particular: I would like to say a word or two before this gets out of hand. Our policy on this list is to provide the answers needed no matter how obvious or well posted those answers may be. Emotionally negative responses are discouraged and generally

[sniffer] Re: re subscriptions to list

2007-11-29 Thread Matt
All auto-responders should be burnt in hell Have a nice day :) Matt Pete McNeil wrote: Regarding this thread and to nobody in particular: I would like to say a word or two before this gets out of hand. Our policy on this list is to provide the answers needed no matter how obvious or

[sniffer] REVDNS

2007-11-28 Thread george kulman
Pete, Rulebase Update Notifications from BI.Arm1.armresearch.com [74.205.4.85] are failing Declude's REVDNS. Might a PTR be in order? DNSSTUFF doesn't show one. George

[sniffer] Re: REVDNS

2007-11-28 Thread Herb Guenther
Yup, same here X-RBL-Warning: FROMNOMATCH: Env sender ([EMAIL PROTECTED]) From: () mismatch. X-RBL-Warning: HELOBOGUS: Domain UnknownHost returns a server failure for MX or A records. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 74.205.4.85 with no reverse DNS entry. george

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Bill Foresman
Thanks, Pete. I was looking for the code I needed to add to the scripts that would automate that? Thanks, Bill Foresman Matrosity Hosting 850-656-2644 -Original Message- From: "Pete McNeil" [EMAIL PROTECTED] Sent 11/23/2007 9:52:45 AM To: "Message Sniffer Community"

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Pete McNeil
Hello Bill, Friday, November 23, 2007, 4:55:09 AM, you wrote: Hi Pete, I don't think our logs are being compressed even though I'm using the snifferupdatetools. I see where this is mentioned but after checking the scripts I don't think this is happening. How can I do this? It is

[sniffer] Re: FTP access to snf rulebase files is no longer available.

2007-11-23 Thread Bill Foresman
Hi Pete, I don't think our logs are being compressed even though I'm using the snifferupdatetools. I see where this is mentioned but after checking the scripts I don't think this is happening. How can I do this? Thanks, Bill Foresman Matrosity Hosting 850-656-2644 -Original Message-

[sniffer] No email updates.

2007-11-21 Thread Frederick Samarelli
Fred # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX

[sniffer] Re: No email updates.

2007-11-21 Thread Colbeck, Andrew
For what it's worth, it is working for my two licences. I received email update notifications at: 90 minutes ago 3 18 minutes ago 4 38 minutes ago 6 hours 13 minutes ago Andrew 8) -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Frederick

[sniffer] Server didnt restart

2007-11-20 Thread Serge
Hello My server rebooted last night. Sniffer server did not restart correctly. I fixed that, but i have 40K+ message in the imail/spool/proc, most inbound and not yet localy delivered. Will they be reprocessed automaticaly ? or is there something else i need to do ? How long will it take ?

[sniffer] Re: Server didnt restart

2007-11-20 Thread Paul Rogers
They will get processed it's just a matter of how long it will take. I think the answer will depend on how many messages per hour your server normally processes. You didn't specify how long your server was offline so we can only guess how long it took to accumulate 40k messages (and thus a per

[sniffer] AW: [sniffer] Server didnt restart

2007-11-20 Thread Hirthe, Alexander
Hi, I would stop all mailservices (Queuemgr, SMTPD32, Decludeproc) and restart them all. We had over 40 k on Sunday (crashed decludeproc) and it took about 6 hours (dual Xeon 3.0) Alex -Ursprüngliche Nachricht- Von: Message Sniffer Community [mailto:[EMAIL PROTECTED] Im Auftrag

[sniffer] Re: Server didnt restart

2007-11-20 Thread Serge
Oh, forgot Most of the processor time was use by declude proc Also, since i go thru 2 satellite connections, DNS queries usualy take much longer than you guys Would probably be calling on Darell next week for help optimizing my declude tests/filters - Original Message - From:

<    2   3   4   5   6   7   8   9   10   11   >