[sniffer] Re: NEW Version 2-9b1.1 Wide Beta

was not included in the source. On my redhat boxes it didn't complain. I added the file with no ill effects here. I'm including a new networking.hpp file that should solve the problem for you if I'm correct. Please let me know. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Updates to log rotation scripts

=Message_Sniffer.TechnicalDetails.GBUdb Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail

[sniffer] Re: Updates to log rotation scripts

) and more can be found in the status reports: licenseid.status.second licenseid.status.minute licenseid.status.hour Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you

[sniffer] Re: NEW Version 2-9b1.1 Wide Beta

#NEW_SNF_V2-9_Wide_Beta More specifically: http://www.armresearch.com/message-sniffer/download/SNF2-9b1.4.Source.zip Best, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you

[sniffer] Re: New Server/Client configuration

Hello John, Thursday, October 11, 2007, 2:15:13 PM, you wrote: 3) The logs are rotating according to UTC time. How can that be configured to rotate in local time? Not at this time. I'll add that to the list. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Updates to log rotation scripts

activity and effectiveness data directly from the telemetry. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe

[sniffer] Re: All about GBUdb

-Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Saturday, October 06, 2007 6:06 PM To: Message Sniffer Community Subject: [sniffer] All about GBUdb Hello Sniffer Folks, At your convenience please review the following

[sniffer] SNFV2-9 Wide Beta now at version 1.4

distribution will be updated shortly with the new changes incorporated. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

running after the first time it was called by my mail server. With the new release, do I have to install as a service? Thanks, Chris -Original Message- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Tuesday, October 09, 2007 5:54 PM

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

-- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

by calling the correct program to scan your messages - either the old SNF program or the new SNFClient. You do not need to rename any of the program files with the new version. If you do there will not be a problem but it is not necessary and not recommended. Hope this helps, _M -- Pete McNeil

[sniffer] Re: SNFV2-9 Wide Beta now at version 1.4

the server piece be on a different machine? No, the server piece must be on the local machine. Thanks! (And if its obvious no, I haven't yet read the documentation on the new sniffer yet) RT oh yeah. Important stuff in there. Don't miss it. ;-) _M -- Pete McNeil Chief Scientist

[sniffer] Re: timing for production

(which is always an on-going project) and hopefully installers for some platforms. However, I expect the actual software will be certified very quickly given it's history. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] New SNF2-9b1.4.MDaemon released.

. The change log describes the relevant changes to the engine. Thanks! _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: False Positives

for this purpose. Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E

[sniffer] Re: False Positives

for this purpose. Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: New Beta Configuration - Please Read This And Adjust Your Configuration

. :-) As for an estimate - if all goes well by the end of the week we should have both the *nix and MDaemon plugin betas (with tweaked docs). Thanks! _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you

[sniffer] NEW Version 2-9b1.1 Wide Beta

comments, questions, and feedback will help guide our efforts. The value of the discussions we share both privately and on this list cannot be overstated. Thanks for your patience, trust, and participation! Enjoy, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: False Positive - how to react?

Hello Stefan, Tuesday, October 2, 2007, 3:14:03 AM, you wrote: Pete McNeil wrote: I will respond off list. Did you try to contact me? Yes. I didn't see anything from you. If yes which e-mail address did you use? I used the address you used to post to the list. [EMAIL PROTECTED] snip

[sniffer] Re: False Positive - how to react?

filter a valid mail. What is the best way to handle stuff like this? Check out this page: http://kb.armresearch.com/index.php?title=Message_Sniffer.FAQ.FalsePositives -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: False Positive - how to react?

to be considered a best practice. BUT - that is certainly not always the case and there are plenty of systems that do delete or reject messages instead. We do our best to handle all cases ;-) _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Category idea

as a product at this time. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL

[sniffer] Re: Address

is to set up proper SPF records for your domains. That will at least help others skip the malware using your addresses more easily. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you

[sniffer] Re: FPs on 1573590

. I've pulled the rule. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED

[sniffer] Re: Microsoft Exchange

SMTP as a mail sync. However that can be challenging. What you are probably looking for in this case is ORF http://kb.armresearch.com/index.php?title=Message_Sniffer.Installation.ORF Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: pricing

Hello Jason, Thursday, August 9, 2007, 2:24:51 AM, you wrote: hi all may I know the pricing of message sniffer plugins for Mdaemon? is it a one time cost or depends on users? A subscription to the rulebase is $495 / year per server. Thanks, _M -- Pete McNeil Chief Scientist

[sniffer] Re: pricing

Jason, Thursday, August 9, 2007, 2:24:51 AM, you wrote: hi all may I know the pricing of message sniffer plugins for Mdaemon? is it a one time cost or depends on users? A subscription to the rulebase is $495 / year per server. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research

[sniffer] Re: working copy

-sniffer/forms/order-trial.jsp Hope this helps, Thanks! _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: Imail QueueMgr.exe consumes all Paged Pool

so unless the OS decides to do something different with it you shouldn't see any special requirements. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscri

[sniffer] Re: After AutoSNF MessageSniffer stops working

administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail

[sniffer] Spam Storm - Watch for high traffic rates - ecard malware new PDF variant

traffic with spikes well in excess of 300% Hope this info is helpful, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC.attachment: 20070703SpamstormSpike.pngattachment: 20070703SpamStormRateSnapshot.png# This message

[sniffer] Re: I'm confused

in question triggered two rules with a score of 61 and two other rules with a score of 0. The 0 trumps the 61??? -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed

[sniffer] Spam storm -- Greeting card malware w/ numbered links.

Hello Sniffer Folks, The greeting card malware spam is being pushed right now with amazing bandwidth! This is the first 11000+ / hour spike we've seen in quite a while. Rules are in place for this, but be on the look out in case it hits you before your update is ready. _M -- Pete McNeil

[sniffer] Greeting Malware Spike Graph

Hello Sniffer Folks, Vertical Wall Of Spam -- Pete McNeil Chief Scientist, Arm Research Labs, LLC.attachment: 20070629GreetingMalwareStormInProgress.png# This message is sent to you because you are subscribed to the mailing list

[sniffer] Re: .pdf Attachments

to make them more difficult to filter. That's it :-) _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E

[sniffer] Re: Dead Sniffer processes piling up.

has been successful apparently. Thanks for the details on this. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: Error Messages since WeightGate

to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch

[sniffer] Re: Appriver issue

updates for SNF. Yesterday's events created a tremendous load on the network and that caused some packet loss that caused rulebase downloads to slow down for a time. For more about ARM see: http://www.armresearch.com/ Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs

[sniffer] Re: Appriver issue

-- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E

[sniffer] Re: Downloads are not working....

. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Downloads are not working....

. This isn't good The good news is that the problem has been corrected now. We are still seeing some after-effects from it, but those should be gone before too long. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Spam

Hello David, Monday, May 14, 2007, 2:59:16 AM, you wrote: Do not send spam to the sniffer@ list. Submit un-captured spam to [EMAIL PROTECTED], or preferably to a spam collection pop3 box on your system that can be picked up by our bots. Thanks! _M

[sniffer] Re: Spam

@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC.attachment

[sniffer] Re: Spam

-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Spam Storm

thing else? Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED]

[sniffer] Re: Fw: lot's of legit mailservsr in spamdatabases

to see how it works when we throw our "wild mix" of systems at it ;-) Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the ma

[sniffer] Re: Fw: lot's of legit mailservsr in spamdatabases

what it learns. If it sees a lot of spam then it will decide that the IP is not a good source and will act accordingly. If it sees primarily legitimate messages then it will decide that the IP is good. If it sees a mix then it most likely will decide not to decide. _M -- Pete McNeil

[sniffer] Re: Anyone else getting hit hard today?

, distribute or otherwise act upon this email. If you have received the email in error, please contact the sender immediately and delete the email. The unauthorized use of this email may result in liability for breach of confidentiality, privilege or copyright. -- Pete McNeil Chief Scientist, Arm

[sniffer] Re: How to incorporate a white list?

The F001 bot will be disabled until further notice. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: How to incorporate a white list?

the circumstances - disabling F001 appears to be the best choice. If conditions change then we can always reactivate the device. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you

[sniffer] Re: How to incorporate a white list?

Hello Andy, Tuesday, April 3, 2007, 9:36:17 AM, you wrote: Hi Phil, Yes, it seems as if some Sniffer rules, e.g., 1367683, is broadly targeting Google's IPs. I've submitted 3 false positive reports since last night, at least two of them were Google users, one located in the U.S. and the

[sniffer] Re: How to incorporate a white list?

as nokens (Excluded on entry) to prevent manual or automatic processes from creating black rules. As you point out, though, occasionally any system will allow errors from time to time. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Blank Header Emails still getting Through

at it. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST

[sniffer] Re: Is this working?

-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: assert! ?

Hello Jay, Wednesday, March 21, 2007, 1:08:35 AM, you wrote: What's the status of Assert!? I see this mentioned in your Wiki in August of 05, but it's coming soon on your web site? Assert! exists and was in production for a while, but we determined that it was not complete enough so we shut

[sniffer] Re: Merak integration problems

MARKSPAM0/MARKSPAM STOP0/STOP EXECUTE0/EXECUTE TARPITSENDER0/TARPITSENDER FIXRFC8220/FIXRFC822 SMTPRESPONSE0/SMTPRESPONSE STRIPALL0/STRIPALL HEADERVAL0X-SNIFFER-FLAG: Yes /VAL /HEADER /FILTER /CONTENTFILTER _ Andy http://aguk.net Hope this helps, _M -- Pete McNeil Chief

[sniffer] Re: Files in Sniffer Directory

. This can effect performance by increasing the number of active processes on the system. Also, the extra files slow down directory scanning and this can also reduce performance and bring the system closer to having a problem. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs

[sniffer] Re: Files in Sniffer Directory

a certain date automatically? For example, if the file date is older than the current date minus [Insert Number of Days Here] days, it could automatically remove it. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Message Sniffer Community sniffer@sortmonster.com Sent

[sniffer] Re: Uptick in spam

queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED

[sniffer] Re: Temp folder location

Hello Paul Rogers, Monday, February 12, 2007, 7:26:01 AM, you wrote: Is there anyway way to change the location where sniffer drops its temp files (other than moving the app files)? No. The current version of SNF uses a single directory for it's workspace. Best, _M -- Pete McNeil Chief

[sniffer] Re: Lots of stock spam getting through

of bandwidth behind them... SNF should be catching them now (it is here). Chances are that some got through to you before your rulebase updated with the new rules. Let me know if you're still having a problem. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Pictures worth a few words...

on the 48 hour graph that 20 hours ago the rates doubled (as if somebody flipped a switch) and this does not appear to be a spike (It's not coming down). _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. 200701161031-48hour.png Description: PNG image 200701161032-30day.png Description

[sniffer] Re: Transition to new deliver server completed. Watch Out For The Minor Changes!

the firewall issue cleared the tempftp host will go away. Sorry for the trouble. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: Transition to new deliver server completed. Watch Out For The Minor Changes!

first, stop your persistent instance, Then (once no more messages are being processed) clean out any abandoned job files (.xxx, .que, .fin, .wrk, .err, .abt) then restart your persistent instance, then restart smtp. Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs

[sniffer] Update rate increased by 16.6%.

you should also see less leakage and quicker responses to new mutations of spam. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: FTP server / firewall issues - Resolved.

on *nix systems where wget and gzip are generally already installed. There are others of course. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed

[sniffer] Re: FTP server / firewall issues - Resolved.

there is always only one hole to open in the firewall. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. PS: I can hear the question out there -- if FTP is so bad then what about log files -- how do you make that go away? The answer is that the next version of SNF (V2-9

[sniffer] Transition to new deliver server completed. Watch Out For The Minor Changes!

will fail to authenticate. As far as I can tell from watching the logs there are no other issues so far. Thanks to Matt Reimer for tracking this down and reporting the fix. Best, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Upgrading SNF rulebase delivery servers.

what we can to minimize this possibility. Hope this helps, Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: Rules for Large International ISPs

that there will be a nonzero error rate - but that error rate is demonstrably small given our current process, and we are constantly researching and developing techniques to improve on that rate. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Rules for Large International ISPs

features that may obviate the need for such a thing... Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com

[sniffer] Re: Stock spam

on image spams so it has become necessary to abandon that tactic in order to minimize leakage. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed

[sniffer] Re: Uploading problems

to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research

[sniffer] Re: Uploading problems

mode. PORT 63,175,74,17,12,154 200 PORT command successful. Consider using PASV. STOR logfile01.log 150 Ok to send data. ! Send error: connection reset Transmitted 27779584 bytes in 930.4 secs, (292.72 Kbps), transfer failed ! Receive error: Blocking call cancelled -- Pete McNeil Chief

[sniffer] Re: Files that appeared in sniffer directory

your SMTP processing. 7. Check your SNF log file for any errors. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: Configuring Sniffer in declude....

am checking? For example, 062, 063, etc. Thanks again, Keith From: Message Sniffer Community on behalf of Pete McNeil Sent: Fri 12/1/2006 11:37 AM To: Message Sniffer Community Subject: [sniffer] Re: Configuring Sniffer in declude Hello

[sniffer] Re: Configuring Sniffer in declude....

. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED

[sniffer] Re: Configuring Sniffer in declude....

lightweight and so I expect the cycles saved far outweigh those that are added. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: Configuring Sniffer in declude....

to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

=Message_Sniffer.Installation.SpamAssassin Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E

[sniffer] Re: New web server

(pages should all now be .jsp) and please let us know so we can fix it. Thanks! k -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer

[sniffer] Re: Persistant mode

itself and the rulebase every 10 minutes or so (unless that is changed in the .cfg file or the reload command is given at the command line). You don't need to do anything to get the new rulebase to be recognized. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Increase in spam

Hello Andrew, Wednesday, October 25, 2006, 1:33:20 PM, you wrote: For another organization's graph of spam trends as received by them, check out the updated graphs at TQM cubed: http://tqmcube.com/tide.php Their graph shows a sharp uptick at the end of June 2006. ...and a new upward trend

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

license ID (match your existing .exe). Copy the new .exe over the old .exe. Restart your persistent instance (if you have one). Start processing messages. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: SPAM Problems

off without it. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL

[sniffer] Version 2-3.5 Release -- Faster Engine

, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

will be one of the early alphas available with the new engine and GBUdb when we begin open testing. I'm working on the final bits and pieces of that as my top priority. Just wanted to get this out to the command-line crowd because there is an urgent need. Now - back to work with me :-) _M -- Pete

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

Hello Jeff, Monday, October 23, 2006, 4:10:31 PM, you wrote: This is my first upgrade. Is it really as easy as unzipping and renaming ?? Yes. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

Hello Computer, Monday, October 23, 2006, 4:16:16 PM, you wrote: Hi Jeff, Be sure to stop the Sniffer services (Persistent) and the Declude services, then rename and replace the Sniffer EXE file, then restart the services. A much more complete answer :-) _M -- Pete McNeil

[sniffer] Re: Version 2-3.5 Release -- Faster Engine

Hello Alberto, Monday, October 23, 2006, 4:27:08 PM, you wrote: Same method for Imail 2006.1 + MxGuard ?? Yes. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you

[sniffer] Re: Increase spam

like to recommend using any single test to fail a message - including SNF, but that is where we are these days. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you

[sniffer] Re: Significant increase in false positives

not to be spam in that group is less than that (due to the weekend) so approximately 100 seems reasonable. If there are FPs then it is likely they failed no other tests. ] Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC

[sniffer] Re: email

so - at least not on purpose. There have been a lot of odd DNS based things going on today. I will look into it, but at the moment things seem to be working. _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message

[sniffer] Re: Significant increase in false positives

in over the weekend and resulted in an unusual number of false positives today. The rule was removed. IIRC the rule id was: 1174356 Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you

[sniffer] Re: Significant increase in false positives

r any other external programs that might wish to add headers. Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sni

[sniffer] Re: Thanks Sniffer

] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail

[sniffer] Re: Fwd: Newsletter HiTech Insider - n. 317 - 11/10/2006

ct support@ for details on this. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail

[sniffer] Re: Fwd: Newsletter HiTech Insider - n. 317 - 11/10/2006

ute missed spam on a regular basis and/or if you have clean spamtraps to share then we prefer that you create pop3 accounts on your system to collect these spam so that our bots can pick them up and queue them directly for processing. Contact support@ for details on this. Thanks, _M -- Pete Mc

[sniffer] Re: Log uploading issues

for this. Thanks, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. # This message is sent to you because you are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch

[sniffer] Re: FTP Troubles

are subscribed to the mailing list sniffer@sortmonster.com. To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to the INDEX mode, E-mail to [EMAIL PROTECTED] Send administrative queries to [EMAIL PROTECTED] -- Pete McNeil

<    1   2   3   4   5   6   7   8   9   10   >