[sniffer] Re: New purchase question

2006-06-19 Thread Paul Fuhrmeister 
I'm getting swamped with emails that have

No TO address, no SUBJECT, and no BODY

I'm using MxGuard and don't see a way to block these. 

Does sniffer return a code if there's no body? No subject AND no body?

That would be handy, if it did.

Paul Fuhrmeister
[EMAIL PROTECTED]



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Re: New purchase question

2006-06-19 Thread Greg Evanitsky 


On Jun 19, 2006, at 2:17 PM, Pete McNeil wrote:


Declude folks posted a combination rule that seems to be working well
for them. Here is an excerpt from that post:


If you are going to add that filter to your system, my advice is to  
give it a very low weight. Others said it worked great for them, but  
I was seeing a very high percentage of false positives with it.


I'm currently testing a modification of the filter to see if this new  
version works better for me.


Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113




#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Re: New purchase question

2006-06-15 Thread Roger Broemeling 

This is how I do it, although there may be better ways.

I create a scheduled task to run a batch file called spam.cmd that runs 
from within the spam folder.  This copies the spam caught that day into 
a dated folder.  That way I can delete old spam, and keep the folder 
organized.  This seems to work well, with imail, but if there are 
probably better ways out there.


Here is my batch file

REM This portion gets the date
FOR /F TOKENS=2-4 DELIMS=/  %%F IN ('DATE /T') DO (
 SET MM=%%F
 SET DD=%%G
 SET =%%H
)

REM This portion creates a folder with todays date MM-DD-
mkdir %MM%-%DD%-%%

REM moves the current files into the dated folder.
move *.smd .\%MM%-%DD%-%%\
move *.GSE .\%MM%-%DD%-%%\

Hope thats of help.

Roger

Phillip Cohen wrote:
I am looking at purchasing Sniffer to run on our old VOPMAIL server. I 
have had the demo running and it seems to do an ok job. My question is 
how all of you out there handle the SPAM box.


In the demo all of the spam goes to a general spam directory. This is 
pretty messy and almost impossible to go through to find out if 
something got caught that shouldn't have. Is it possible to have a 
separate bat file for each domain that keeps the spam in a domain by 
domain spam box? Next is it possible to do it on a mailbox by mailbox 
basis so they can look through the spam they get? If I can have separate 
batch files will this work in persistent mode?


What do you folks do with the spam that is removed? Does the user have 
any access to it and how?



Thanks,

Phil



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Re: New purchase question

2006-06-15 Thread Jonathan 

You could do something like this:
arj.exe m -c -i -h#MMDD-hh-mm-ss archive\spam\spam.arj spam-offline\*.*

This would create a named archive of each day ..  compressed text 
doesn't take much space, so you can keep it around for a long time ..


Jonathan


At 03:02 PM 6/15/2006, you wrote:

This is how I do it, although there may be better ways.

I create a scheduled task to run a batch file called spam.cmd that 
runs from within the spam folder.  This copies the spam caught that 
day into a dated folder.  That way I can delete old spam, and keep 
the folder organized.  This seems to work well, with imail, but if 
there are probably better ways out there.


Here is my batch file

REM This portion gets the date
FOR /F TOKENS=2-4 DELIMS=/  %%F IN ('DATE /T') DO (
 SET MM=%%F
 SET DD=%%G
 SET =%%H
)

REM This portion creates a folder with todays date MM-DD-
mkdir %MM%-%DD%-%%

REM moves the current files into the dated folder.
move *.smd .\%MM%-%DD%-%%\
move *.GSE .\%MM%-%DD%-%%\

Hope thats of help.

Roger

Phillip Cohen wrote:
I am looking at purchasing Sniffer to run on our old VOPMAIL 
server. I have had the demo running and it seems to do an ok job. 
My question is how all of you out there handle the SPAM box.
In the demo all of the spam goes to a general spam directory. This 
is pretty messy and almost impossible to go through to find out if 
something got caught that shouldn't have. Is it possible to have a 
separate bat file for each domain that keeps the spam in a domain 
by domain spam box? Next is it possible to do it on a mailbox by 
mailbox basis so they can look through the spam they get? If I can 
have separate batch files will this work in persistent mode?
What do you folks do with the spam that is removed? Does the user 
have any access to it and how?


Thanks,
Phil

#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]





#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Re: New purchase question

2006-06-15 Thread Roger Broemeling 
I do keep the files just in case something gets flagged and a client 
asks me to look.  As a single domain I imagine that this is easier to 
deal with.  I keep my spam folders up to a month, but I don't script the 
delete I just manually remove them any time I happen to be in the 
folder.  So I tend to have about two months worth.


If my clients suspect that an email is getting flagged in error, they 
just email me with the address.  Since we are a smaller business that 
works well. Usually I just do a windows search, but am tempted to try 
the grep command for windows, too search threw the archive.


Roger
Phillip Cohen wrote:

Roger,

Thanks for the info, that is a good way to deal with the mass spam 
storage.  Do you ever have the requirement to go back through the SPAM 
that you have saved? How long do you save it and do you just delete it 
after a certain date? How do your clients ask you or what do you do to 
retrieve a possible real message that might have been considered spam? 
If sniffer never makes a false positive I guess it is no big deal just 
to delete the spam, but on the rare chance there are false positives I 
would sure hate to delete an important message.


This mail server supports about 60 domains so having all of the spam in 
one folder is a bit of a mess. VOPMAIL allows for individual mailbox 
agents so I guess somehow I could have a bat file for each user or pass 
parameters to a bat file, but I hate to think about that one. Going 
through each mailbox on the server to enter the agent commands will be a 
real pain timewise.


Wondering what other VOPMAIL users do out there if there are any of us 
left.


Phil


At 12:14 PM 6/15/2006, you wrote:

This is how I do it, although there may be better ways.

I create a scheduled task to run a batch file called spam.cmd that 
runs from within the spam folder.  This copies the spam caught that 
day into a dated folder.  That way I can delete old spam, and keep the 
folder organized.  This seems to work well, with imail, but if there 
are probably better ways out there.


Here is my batch file

REM This portion gets the date
FOR /F TOKENS=2-4 DELIMS=/  %%F IN ('DATE /T') DO (
 SET MM=%%F
 SET DD=%%G
 SET =%%H
)

REM This portion creates a folder with todays date MM-DD-
mkdir %MM%-%DD%-%%

REM moves the current files into the dated folder.
move *.smd .\%MM%-%DD%-%%\
move *.GSE .\%MM%-%DD%-%%\

Hope thats of help.

Roger




#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]



#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Re: New purchase question

2006-06-15 Thread Darin Cox 
We zip ours nightly and save for 30 days just to make sure we don't miss
anything in reviewing the hold queue.  In practice, a week may be enough,
but two is probably preferable.

Darin.


- Original Message - 
From: Phillip Cohen [EMAIL PROTECTED]
To: Message Sniffer Community sniffer@sortmonster.com
Sent: Thursday, June 15, 2006 5:00 PM
Subject: [sniffer] Re: New purchase question


Roger,

Thanks for the info, that is a good way to deal with the mass spam
storage.  Do you ever have the requirement to go back through the
SPAM that you have saved? How long do you save it and do you just
delete it after a certain date? How do your clients ask you or what
do you do to retrieve a possible real message that might have been
considered spam? If sniffer never makes a false positive I guess it
is no big deal just to delete the spam, but on the rare chance there
are false positives I would sure hate to delete an important message.

This mail server supports about 60 domains so having all of the spam
in one folder is a bit of a mess. VOPMAIL allows for individual
mailbox agents so I guess somehow I could have a bat file for each
user or pass parameters to a bat file, but I hate to think about that
one. Going through each mailbox on the server to enter the agent
commands will be a real pain timewise.

Wondering what other VOPMAIL users do out there if there are any of us left.

Phil


At 12:14 PM 6/15/2006, you wrote:
This is how I do it, although there may be better ways.

I create a scheduled task to run a batch file called spam.cmd that
runs from within the spam folder.  This copies the spam caught that
day into a dated folder.  That way I can delete old spam, and keep
the folder organized.  This seems to work well, with imail, but if
there are probably better ways out there.

Here is my batch file

REM This portion gets the date
FOR /F TOKENS=2-4 DELIMS=/  %%F IN ('DATE /T') DO (
  SET MM=%%F
  SET DD=%%G
  SET =%%H
)

REM This portion creates a folder with todays date MM-DD-
mkdir %MM%-%DD%-%%

REM moves the current files into the dated folder.
move *.smd .\%MM%-%DD%-%%\
move *.GSE .\%MM%-%DD%-%%\

Hope thats of help.

Roger



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]




#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]