[sniffer] Re: [Alligate]Alligate and Sniffer again (NL)

2016-01-18 Thread Bonno Bloksma
014 as the last time something was actively done. Even the documentation lists nothing after 2014 and still talks about special settings for the (local) dns server on a Windows 2013 server. With kind regards, Bonno Bloksma system manager tio university of applied sciences julianalaan 9 / 75

[sniffer] Alligate and Sniffer again

2016-01-18 Thread Bonno Bloksma
Sniffer on a Windows platform. With kind regards, Bonno Bloksma system manager tio university of applied sciences julianalaan 9 / 7553 ab hengelo / the netherlands t +31 (0)74-255 06 10 b.blok...@tio.nl<mailto:b.blok...@tio.nl> / www.tio.nl<http://www.tio.nl/en/> Follow us on T

[sniffer] Re: What is your oldest production CPU?

2013-12-27 Thread Bonno Bloksma
Hi Pete, > Hello Sniffer Folks, > > We would like to know what your oldest production CPU is. Oldest production (mail) server is a HP Proliant DL380 G6 with a Xeon E5530 quad cpu With kind regards, Bonno Bloksma Senior system engineer tio university of applied sciences julianalaan

[sniffer] Re: IPv6

2011-03-11 Thread Bonno Bloksma
. Unfortunately I cannot find the reference to that article anymore, I thought I had it bookmarked. :-( Yours sincerely, Bonno Bloksma senior systeembeheerder tio  university of applied sciences for hospitality and tourism julianalaan 9 / 7553 ab hengelo  netherlands t +31-74-255 06 10 / f +31-74-255 06 11

[sniffer] Re: Bad Rule Event

2010-12-16 Thread Bonno Bloksma
every (few) minute(s) in stead of every few hours. Any idea when a new version of Sniffer with that feature will be launched? Yours sincerely, Bonno Bloksma senior systemadministrator tio university of applied sciences for hospitality and tourism julianalaan 9 / 7553 ab hengelo netherlands

[sniffer] Re: how to handle on rule panick?

2009-11-23 Thread Bonno Bloksma
Wiki is the v2 documentation. That was my second attempt when at first a google search for sniffer and rule panic brought me to the v2 wiki docs. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040

[sniffer] how to handle on rule panick?

2009-11-23 Thread Bonno Bloksma
rsion of report the differences for each version. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nl / www.tio.nl

[sniffer] panic rule information

2009-09-08 Thread Bonno Bloksma
rulebase updates. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nl / www.tio.nl

[sniffer] how did I run as service?

2009-06-25 Thread Bonno Bloksma
groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nl / www.tio.nl

[sniffer] Re: New IMPROVED getRulebase.cmd script

2009-03-12 Thread Bonno Bloksma
hat what I'm missing? Because I think I've read that somewhere about problems with timestamps on FAT and NTFS. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20

[sniffer] Re: New IMPROVED getRulebase.cmd script

2009-03-12 Thread Bonno Bloksma
en getting only two or three updates a day where it should have gotten over a dozen? I've switched curl so everything should work ok by now. According to my logs I'm getting a new rulebase about every hour. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hoges

[sniffer] Re: New IMPROVED getRulebase.cmd script

2009-03-10 Thread Bonno Bloksma
dozen? Unfortunately I disabled logging a while ago when everything seemed to run smoothly. :-( Someone to your west would have seen a new rulebase every time they checked no matter what DST. Or is it just that you finally noticed it due to the DST shift? Met vriendelijke groet, Bonno Bloksma s

[sniffer] files in the Sniffer dir

2009-01-04 Thread Bonno Bloksma
old? Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nl / www.tio.nl

[sniffer] upgraded to 3.0

2008-07-18 Thread Bonno Bloksma
is one I just downloaded still reports 3.0 as it's version. Ot was that just the *nix version? Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 [EMAIL PROTECTED] / www.tio.nl

[sniffer] medical spam

2007-06-04 Thread Bonno Bloksma
] but as they are all mixed with some random noice I assume the're pretty much all unique. Any change sniffer can get them in a more generic way or does sniffer indeed have to wait until the next variation comes along in order to code rules for it? Met vriendelijke groet, Bonno Blo

[sniffer] Re: Spam

2007-05-29 Thread Bonno Bloksma
f I had a tool to deploy on all staf PC's where we use Outlook Express mostly (ca. 90%). One other thing that would be nice if IMail webinterface had a way to forward spam with all information intact. Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanageme

[sniffer] Fw: lot's of legit mailservsr in spamdatabases

2007-04-19 Thread Bonno Bloksma
--- Pete, Is this something the new Sniffer can help us with, identifying legit mailservers? Will hits have a separate exit code we can use to identify legit mailservers and reduce points accumulated in Declude via other tests and have the mail go through? Met vr

[sniffer] Re: Integration with Mailenable -> Domain Keys

2007-03-19 Thread Bonno Bloksma
Prot (%ERR%) viruses found>> %1 MOVE /Y %1 C:\SmarterMail\Viruses GOTO END :CLEAN @REM echo Virus scanned by F-Prot (%ERR%) viruses found >> %1 :END Would work as well, just not on NT4 or lower. Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool hotelmanagement en t

[sniffer] update rulebase script

2007-02-08 Thread Bonno Bloksma
in this mail script will report errorlevel 1 at my server when the *.old file does not exist eventhough another script with exactly the same line on the same server DOES work correctly. If I ever find out why. :-( Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool

[sniffer] Re: My rulebase download and log upload script

2006-07-10 Thread Bonno Bloksma
Hi John, Weekend, what is that? That's the days where those pesky users are usualy not messing with the network so YOU can mess with it. ;-) Groetjes, Bonno Bloksma -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, A

Re: [sniffer]Spam Storm - It's a big one.

2006-05-26 Thread Bonno Bloksma
earch.com/index.php?title=Message_Sniffer.LiveReports which would seem to be the logical place. Is it nowhere live to be found or am I looking at the wrong place? Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] #

Re: [sniffer] [Fwd: Diann Helms]

2006-02-15 Thread Bonno Bloksma
o your rulebase please send a > request off-list to [EMAIL PROTECTED] As the above information might be of interest to others I'll ask here first. Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. F

Re: Re[4]: [sniffer] Bad Rule - 828931

2006-02-08 Thread Bonno Bloksma
-- @echo off Set SpamDir=C:\IMail\Spool\Spam Set SpamHold=C:\IMail\Spool\Spam\Hold For /F %%a in (rulespool.log) do ( echo Testing %SpamDir%\D%%a if exist %SpamDir%\D%%a ( echo %%a move %SpamDir%\D%%a %SpamHold%\ move %SpamDir%\Q%%a %SpamHold%\ ) ) :end ---

Re: Re[2]: [sniffer] auto update tmp files

2005-09-22 Thread Bonno Bloksma
1 is a complete path. So just Del %1 should do the trick. Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/Mess

[sniffer] auto update tmp files

2005-09-19 Thread Bonno Bloksma
p.tmp files in my midnight run. Would that be a problem? The only program alias I have is the sniffer update.   Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer   tio hogeschool toerisme en hospitality julianalaan 9 / 7553 ab hengelo t 074 255 06 10 / f 074 255 06 16 [

[sniffer] false positives which catagories?

2005-08-03 Thread Bonno Bloksma
ld I keep (well) below my hold level? Of course all held mail gets reviewed by be, unless it scrores enough other points te get deleted (at 27 points). Groetjes,   Bonno Bloksma

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Bonno Bloksma
ng agrees with sniffer it is held, is several sources agree with sniffer it is deleted. We are a prepschool/university and process about 4K to 5K msg a day. I have one to two false positives in the held mail each year. Met vriendelijke groet, Bonno Bloksma --- [E-mail scanned at tio.nl for v

Re: [sniffer] Changes - another reminder.

2005-02-16 Thread Bonno Bloksma
6 00:10:04 : Starting ftp upload 2005/02/16 00:10:16 : Finished ftp upload Thanks Pete. Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For informati

[sniffer] midnight ftp upload

2005-01-24 Thread Bonno Bloksma
, Jan 21th, I delayed the ftp upload by 10 minutes to get a better timeslot. To my surprise it STILL took 13 minutes to upload the small logfile.   Anybody ANY idea where I, or Pete, can start to look for a clue about what is going on? Groetjes,   Bonno Bloksma Back up my hard drive? How do

Re: [sniffer] log rotation

2005-01-19 Thread Bonno Bloksma
ime zone in the log files is different. > > Hope this helps, Yup. Now all I have to do is remember it. ;-) Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subsc

[sniffer] log rotation

2005-01-19 Thread Bonno Bloksma
0 2536 34 20050118225737 D58e27340b80.GSC 218 16 Clean 0 0 0 9468 33 Groetjes, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html

[sniffer] test sender

2004-12-10 Thread Bonno Bloksma
my "improvements" haven't broken something in stead of waiting till my users complain (certain) spam has increased. It's the small typos that can get to ya in a big way. ;-) Groetjes,   Bonno Bloksma Back up my hard drive? How do I put it in reverse?

Re: Re[2]: [sniffer] Test ordering/precedence

2004-12-03 Thread Bonno Bloksma
do so. Most spam that came through had been tagged by one of those sixties sniffer returncodes. Saved myself some work by just scoring all sniffer returns with the same high score, it's JUST below my hold weight. Any additional points by Declude will trip it into my hold weight. Groetjes,

Re: Re[4]: [sniffer] New Version 2-3.2 has been officially released.

2004-11-24 Thread Bonno Bloksma
tant/Owner > eServices For You Met vriendelijke groet, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html

Re: Re[4]: [sniffer] New Version 2-3.2 has been officially released.

2004-11-24 Thread Bonno Bloksma
to adjust your Declude configuration so > that your message file name is emitted into your message headers. This > way when a false positive does occur we can match the message up to > the log entries and identify the rule or rules that fired. Did that, so for the next time somethin

Re: Re[2]: [sniffer] New Version 2-3.2 has been officially released.

2004-11-23 Thread Bonno Bloksma
ns so as to provide more information about what might be happening? > Hope this helps, > _M We'll see. Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer

Re: [sniffer] New Version 2-3.2 has been officially released.

2004-11-23 Thread Bonno Bloksma
exe with the 2.3.2 exe (of course with the correct id name). Groetjes, Bonno Bloksma - Original Message - From: "Pete McNeil" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 23, 2004 8:58 AM Subject: [sniffer] New Version 2-3.2 has been official

[sniffer] ruleupdate script (was: 2-3.0i9 looks good to me... How about you?)

2004-10-28 Thread Bonno Bloksma
n't fail then we can go ahead and make the switch. if exist %IDNAME%.old del %IDNAME%.old rename %IDNAME%.snf %IDNAME%.old rename %IDNAME%.tst %IDNAME%.snf [] Groetjes, Bonno Bloksma - Original Message - From: "Landry William" <[EMAIL PROTECTED]> To: <[EMAI

Re: [sniffer] Automatic update snafu

2004-08-18 Thread Bonno Bloksma
even if it isn't newer. I thought the -N parameter was supposed to limit > that. What am I missing? As I don't know anything about the internals of wget only one thing comes to mind. When you process the mysnfcode.new.gz file does it get deleted? If so, wget has nothing to compare. G

Re: [sniffer] A few notes...

2004-07-27 Thread Bonno Bloksma
groet, Bonno Bloksma --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html

[sniffer] uploading logs slower

2004-06-28 Thread Bonno Bloksma
x27;m still looking for a clue but is there a problem uploading arround that time?   Groetjes,   Bonno Bloksma    

[sniffer] downloading the compressed rulebase

2004-06-25 Thread Bonno Bloksma
ly test whether it was realy that simple, were well spent. Groetjes, Bonno Bloksma Back up my hard drive? How do I put it in reverse? --- [E-mail scanned at tio.nl for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription

[sniffer] logrotate

2004-04-14 Thread Bonno Bloksma
? I sent it to the list friday april 9th but it never made it back overhere?   Groetjes,   Bonno Bloksma