[sniffer] Re: Merak integration problems

2007-03-15 Thread Chris Bunting
Thanks Pete, that did the trick! Although after importing the filter
it's a bit stange how it actually works (I can't find the logic listed
after importing it into the GUI), but it does actually work well.

 

Thank You,

Chris Bunting

Lancaster Networks

Direct: 717-278-6639

Office: 888-LANCNET x703

MS Certified Systems Engineer

IP Telephony Expert



Lancaster Networks

1085 Manheim Pike 

Lancaster PA 17601 

www.lancasternetworks.com

--

Corporate Technology Solutions...

Specializing in 3com NBX Telephony Solutions

IT Services - Phone Systems - Digital CCTV

--

The information in this e-mail is confidential and may be privileged or

subject to copyright. It is intended for the exclusive use of the

addressee(s). 

If you are not an addressee, please do not read, copy, distribute or

otherwise act upon this email. If you have received the email in error, 

please contact the sender immediately and delete the email. The

unauthorized use of this email may result in liability for breach of

confidentiality, privilege or copyright.

 

From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf Of Pete McNeil
Sent: Monday, March 12, 2007 7:23 AM
To: Message Sniffer Community
Subject: [sniffer] Re: Merak integration problems

 

Hello Chris,

 

Monday, March 12, 2007, 1:07:37 AM, you wrote:

 

 

Fellow Listees...

 

I am currently running Merak Mail Server 8.9.1, and using my own
implementation of Message sniffer as an antivirus scanner.

 

snip/

 

 

 

Anyone have any ideas? 

 

Have you seen this:

 

http://forum.icewarp.com/viewtopic.php?p=3964sid=09b684820aa495200c00be
8857c42e6c

 

Or more specifically this:

 

aguk

 

 

 

Joined: 16 Oct 2006

Posts: 105

 

 

Posted: Mon Dec 18, 2006 11:01 pmPost subject: 

 



Well stupidly there is a Content Filter to make this work. 

 

I have the following content filter and it appears to be working. 

 

 

Code:

CONTENTFILTERFILTERACTIVE1/ACTIVE 

TITLESNIFFER/TITLE 

READONLY0/READONLY 

CONDITIONAND1/AND 

LOGICALNOT0/LOGICALNOT 

EXPRESSION6/EXPRESSION 

CONTAINTYPE8/CONTAINTYPE 

MESSAGESIZESMALLER0/MESSAGESIZESMALLER 

MESSAGESIZE1/MESSAGESIZE 

/CONDITION 

CONDITIONAND1/AND 

LOGICALNOT0/LOGICALNOT 

EXPRESSION4/EXPRESSION 

CONTAINTYPE8/CONTAINTYPE 

CONTAIND:\sniffer\snfrv2r3.exe xnk05x5vmipeaof7/CONTAIN 

MESSAGESIZESMALLER0/MESSAGESIZESMALLER 

MESSAGESIZE2/MESSAGESIZE 

/CONDITION 

ACCEPT0/ACCEPT 

REJECT0/REJECT 

DELETE0/DELETE 

ENCRYPT0/ENCRYPT 

PRIORITY0/PRIORITY 

SCORE1/SCORE 

MARKSPAM0/MARKSPAM 

STOP0/STOP 

EXECUTE0/EXECUTE 

TARPITSENDER0/TARPITSENDER 

FIXRFC8220/FIXRFC822 

SMTPRESPONSE0/SMTPRESPONSE 

STRIPALL0/STRIPALL 

HEADERVAL0X-SNIFFER-FLAG: Yes 

/VAL 

/HEADER 

/FILTER 

/CONTENTFILTER 

 

_

Andy 

http://aguk.net

 

Hope this helps,

 

_M

 

-- 

Pete McNeil

Chief Scientist,

Arm Research Labs, LLC.

#
 
This message is sent to you because you are subscribed to
 
  the mailing list sniffer@sortmonster.com.
 
To unsubscribe, E-mail to: [EMAIL PROTECTED]
 
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
 
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 
Send administrative queries to  [EMAIL PROTECTED]
 
 


[sniffer] Re: Merak integration problems

2007-03-12 Thread Pete McNeil




Hello Chris,

Monday, March 12, 2007, 1:07:37 AM, you wrote:







Fellow Listees

I am currently running Merak Mail Server 8.9.1, and using my own implementation of Message sniffer as an antivirus scanner.





snip/








Anyone have any ideas?





Have you seen this:

http://forum.icewarp.com/viewtopic.php?p=3964sid=09b684820aa495200c00be8857c42e6c

Or more specifically this:

aguk



Joined: 16 Oct 2006
Posts: 105





Posted: Mon Dec 18, 2006 11:01 pm  Post subject:











Well stupidly there is a Content Filter to make this work.

I have the following content filter and it appears to be working.





Code:




CONTENTFILTERFILTERACTIVE1/ACTIVE
TITLESNIFFER/TITLE
READONLY0/READONLY
CONDITIONAND1/AND
LOGICALNOT0/LOGICALNOT
_expression_6/_expression_
CONTAINTYPE8/CONTAINTYPE
MESSAGESIZESMALLER0/MESSAGESIZESMALLER
MESSAGESIZE1/MESSAGESIZE
/CONDITION
CONDITIONAND1/AND
LOGICALNOT0/LOGICALNOT
_expression_4/_expression_
CONTAINTYPE8/CONTAINTYPE
CONTAIND:\sniffer\snfrv2r3.exe xnk05x5vmipeaof7/CONTAIN
MESSAGESIZESMALLER0/MESSAGESIZESMALLER
MESSAGESIZE2/MESSAGESIZE
/CONDITION
ACCEPT0/ACCEPT
REJECT0/REJECT
DELETE0/DELETE
ENCRYPT0/ENCRYPT
PRIORITY0/PRIORITY
SCORE1/SCORE
MARKSPAM0/MARKSPAM
STOP0/STOP
EXECUTE0/EXECUTE
TARPITSENDER0/TARPITSENDER
FIXRFC8220/FIXRFC822
SMTPRESPONSE0/SMTPRESPONSE
STRIPALL0/STRIPALL
HEADERVAL0X-SNIFFER-FLAG: Yes
/VAL
/HEADER
/FILTER
/CONTENTFILTER





_
Andy
http://aguk.net





Hope this helps,

_M

--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]