[sniffer] The new version of SNF

2007-12-28 Thread Alberto Santoni
Hello 

The new version of SNF is released? 
How much is it stable?

Thanks 
Alberto



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: After AutoSNF MessageSniffer stops working

2007-07-08 Thread Alberto Santoni
Thank you a lot ... I will investigate.

Regards
Alberto


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Pete McNeil
 Sent: 07 July 2007 19:24
 To: Message Sniffer Community
 Subject: [sniffer] Re: After AutoSNF MessageSniffer stops working
 
 Hello Alberto,
 
 Since you are stopping the message processing services I don't see
 this causing any harm - but it does seem like overkill and may simply
 help you mask another problem.
 
 A build up of stale job files usually indicates another more serious
 problem. Normally, SNF will keep these files out of the way. The only
 time it doesn't do this is when it gets killed off before it has a
 chance to complete it's processing. This usually happens when some
 other system event occurs or when the system is heavily overloaded for
 some period.
 
 It would be a good idea to track down what these other factors are and
 solve the root problem.
 
 That said, if you insist on stopping message processing at each update
 I recommend that you stop processing just before the actual rulebase
 swap and then restart processing after the swap and your cleanup
 operations are completed.
 
 Note that updates are more frequent now and will become more frequent
 with time.
 
 Note also that the next version (in testing) will not generate job
 files.
 
 Hope this helps,
 
 _M
 
 Remainder for reference:...
 
 Saturday, July 7, 2007, 4:34:34 AM, you wrote:
 
  Hello
 
  twice (two days ago and this night) after an updating with AutoSNF,
  MessageSniffer stops working, after this accident I have found many
  files in the working directory with extensions .FIN .XXX
 
  Then:
  I stop iMail SMTP Service
  I stop MXGUARD Service
  I stop MessageSniffer Service
 
  I wait 30 seconds
 
  I delete *.FIN
  I delete *.XXX
  I start MessageSniffer Service
  I start MXGUARD Service
  I start iMail SMTP Service
 
  After that everything works fine again!
 
  I had thought about adding these commands at the end of AutoSNF.
(see
  below)
  What do you think about?
 
  Regards
  Alberto
 
 
  My classic AutoSNF.cmd
 
  @echo off
 
  rem if there is not the trigger email message do nothing
  if NOT exist tmp*.tmp goto nevermind
 
  rem AutoSNF.cmd 200208088.1419 _M
  rem
  rem 20021203 - Updated to check the download with snf2check.exe
  rem
  rem CAUTION! THERE ARE A LOT OF PLACES IN HERE TO CHANGE THE FILE
  rem NAME IF THE LICENSE ID CHANGES. BE SURE TO CATCH THEM ALL WHEN
  rem MODIFYING THIS FILE FOR OTHER SYSTEMS OR LICENSES!
  rem
  rem This file should reside in the sniffer directory along with
  rem wget. Then, this .cmd file can be scheduled in the windows
  rem scheduler... We recommend performing updates every 12 hours
  rem or so... however on most systems a daily update will be
  rem sufficient.
  rem
  rem First, get the updated rules file from the web site.
 
  wget http://www.sortmonster.net/Sniffer/Updates/[codefile].snf -O
  sniffer.new --http-user=sniffer --http-passwd=thepassword
 
  rem
  rem If that worked, then there will be a sniffer.new file.
  rem
 
  if exist sniffer.new goto Replace
 
  rem If the above test fails, then we skip to the end of the file
  rem and take no further action. Everything stays as it is.
 
  goto Done
 
  rem If the test didn't fail we'll replace our file.
 
  :Replace
 
  rem The sniffer.new file exists so we might have a good download.
  rem We'll validate it first then try to swap out as fast as
possible.
  rem In order to do this as quickly as possible, we'll rename the
files
  rem at the critical point. Then delete the old one next time around
  rem so that the admin has a way to recover the last rule base if
needed.
 
  rem The check utility gets the ID from the name but it ignores the
  rem extension so we'll rename it for the test.
 
  rename sniffer.new [codefile].tst
 
  rem Now we need to test the file and check our error level. If the
  rem check fails we'll skip to the end
 
  snf2check.exe [codefile].tst [mySNFcode]
 
  if errorlevel 1 goto Done
 
  echo New File Tested GOOD!
 
  rem If we didn't fail then we can go ahead and make the switch.
 
  if exist [codefile].old del [codefile].old
  rename [codefile].snf [codefile].old
  rename [codefile].tst [codefile].snf
  del tmp*.tmp
 
  INSERT Here the stop/start commands -
 
  rem Handle any additional successful system updates here (before
Done).
 
  :Done
 
  rem If things went well we're all ok.
  rem If something went wrong then we'll do a bit of cleanup.
 
  if exist [codefile].tst del [codefile].tst
 
  :nevermind
 
 
 
 
  #
  This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
  To unsubscribe, E-mail to: [EMAIL PROTECTED]
  To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
  To switch to the INDEX mode, E-mail to
[EMAIL PROTECTED]
  Send administrative queries to  [EMAIL PROTECTED]
 
 
 
 

[sniffer] After AutoSNF MessageSniffer stops working

2007-07-07 Thread Alberto Santoni
Hello 

twice (two days ago and this night) after an updating with AutoSNF,
MessageSniffer stops working, after this accident I have found many
files in the working directory with extensions .FIN .XXX

Then:
I stop iMail SMTP Service 
I stop MXGUARD Service 
I stop MessageSniffer Service

I wait 30 seconds 

I delete *.FIN
I delete *.XXX
I start MessageSniffer Service
I start MXGUARD Service 
I start iMail SMTP Service

After that everything works fine again!

I had thought about adding these commands at the end of AutoSNF. (see
below)
What do you think about?

Regards 
Alberto


My classic AutoSNF.cmd

@echo off

rem if there is not the trigger email message do nothing
if NOT exist tmp*.tmp goto nevermind

rem AutoSNF.cmd 200208088.1419 _M
rem
rem 20021203 - Updated to check the download with snf2check.exe
rem
rem CAUTION! THERE ARE A LOT OF PLACES IN HERE TO CHANGE THE FILE
rem NAME IF THE LICENSE ID CHANGES. BE SURE TO CATCH THEM ALL WHEN
rem MODIFYING THIS FILE FOR OTHER SYSTEMS OR LICENSES!
rem
rem This file should reside in the sniffer directory along with
rem wget. Then, this .cmd file can be scheduled in the windows
rem scheduler... We recommend performing updates every 12 hours
rem or so... however on most systems a daily update will be
rem sufficient.
rem
rem First, get the updated rules file from the web site.

wget http://www.sortmonster.net/Sniffer/Updates/[codefile].snf -O
sniffer.new --http-user=sniffer --http-passwd=thepassword

rem
rem If that worked, then there will be a sniffer.new file.
rem

if exist sniffer.new goto Replace

rem If the above test fails, then we skip to the end of the file
rem and take no further action. Everything stays as it is.

goto Done

rem If the test didn't fail we'll replace our file.

:Replace

rem The sniffer.new file exists so we might have a good download.
rem We'll validate it first then try to swap out as fast as possible.
rem In order to do this as quickly as possible, we'll rename the files
rem at the critical point. Then delete the old one next time around
rem so that the admin has a way to recover the last rule base if needed.

rem The check utility gets the ID from the name but it ignores the
rem extension so we'll rename it for the test.

rename sniffer.new [codefile].tst

rem Now we need to test the file and check our error level. If the
rem check fails we'll skip to the end

snf2check.exe [codefile].tst [mySNFcode]

if errorlevel 1 goto Done

echo New File Tested GOOD!

rem If we didn't fail then we can go ahead and make the switch.

if exist [codefile].old del [codefile].old
rename [codefile].snf [codefile].old
rename [codefile].tst [codefile].snf
del tmp*.tmp

INSERT Here the stop/start commands -

rem Handle any additional successful system updates here (before Done).

:Done

rem If things went well we're all ok.
rem If something went wrong then we'll do a bit of cleanup.

if exist [codefile].tst del [codefile].tst

:nevermind




#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: After Updating MXGUARD

2007-06-28 Thread Alberto Santoni
Pete,

after a day the SNF doesn't work yet ... what else can I try? 
I have checked all that possible 

With my best regards
Alberto Santoni
---
ASPita Sprl
Grande rue au Bois, 196 - 1030 - Brussels
+32(0)2 217 85 28 office
+32(0)2 735 78 65 fax
+32(0)476 53 88 34 mobile
Skype: Aspita.be
---


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Pete McNeil
 Sent: 27 June 2007 23:44
 To: Message Sniffer Community
 Subject: [sniffer] Re: After Updating MXGUARD
 
 Hello Alberto,
 
 Wednesday, June 27, 2007, 5:15:58 PM, you wrote:
 
  Hello
 
  After an update of MxGuard 1.7 - 3.1 the Sniffer doesn't work any
more
  
  I have the Sniffer in persistent mode and loaded with Srvany
  I found many files I never seen in the Sniffer dir .SRV .FIN .XXX
 
  Which tests can I do to understand the problem ?
 
 It turns out that those files have always been there - but most of
 them (not the SRV) went away very quickly.
 
 Most likely during your transition your SNF workspace got clogged with
 a lot of these and that is causing some problems.
 
 First thing to do is to shut down SMTP  SNF (your persistent
 instance) and clear out all of those job files. Each file represents a
 sing scan job - the extension represents the status. With everything
 shut down there should be none of these files so it's safe to delete
 them.
 
 Once that is done you can start things up again and everything should
 work normally.
 
 If not then the normal testing procedures should help you discover the
 problem quickly.
 
 Hope this helps,
 
 _M
 
 
 --
 Pete McNeil
 Chief Scientist,
 Arm Research Labs, LLC.
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: After Updating MXGUARD

2007-06-28 Thread Alberto Santoni
Thank you Eric

I checked my mxguard.ini 
I have SpamFilterTypes=Native,Sniffer :(

May be SNF work now  but unfortunately no SPAM is arriving this
evening on my server :-)

Alberto


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: After Updating MXGUARD

2007-06-28 Thread Alberto Santoni
Hi

I have Win2003
iMail Server 2006.2
MxGuard 3.1
The last version of Message Sniffer

Regard
Alberto Santoni
---
ASPita Sprl
Grande rue au Bois, 196 - 1030 - Brussels
+32(0)2 217 85 28 office
+32(0)2 735 78 65 fax
+32(0)476 53 88 34 mobile
Skype: Aspita.be
---



 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Greg Coffey
 Sent: 28 June 2007 22:04
 To: Message Sniffer Community
 Subject: [sniffer] Re: After Updating MXGUARD
 
 What platform is the server running?  I had problems running Win2003
and
 the latest sniffer, had to back up one ver to make it work.
 
 -- Original Message --
 From: Alberto Santoni [EMAIL PROTECTED]
 Reply-To: Message Sniffer Community sniffer@sortmonster.com
 Date:  Thu, 28 Jun 2007 20:42:08 +0200
 
 Pete,
 
 after a day the SNF doesn't work yet ... what else can I try?
 I have checked all that possible
 
 With my best regards
 Alberto Santoni
 ---
 ASPita Sprl
 Grande rue au Bois, 196 - 1030 - Brussels
 +32(0)2 217 85 28 office
 +32(0)2 735 78 65 fax
 +32(0)476 53 88 34 mobile
 Skype: Aspita.be
 ---
 
 
  -Original Message-
  From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
 Behalf
  Of Pete McNeil
  Sent: 27 June 2007 23:44
  To: Message Sniffer Community
  Subject: [sniffer] Re: After Updating MXGUARD
 
  Hello Alberto,
 
  Wednesday, June 27, 2007, 5:15:58 PM, you wrote:
 
   Hello
 
   After an update of MxGuard 1.7 - 3.1 the Sniffer doesn't work
any
 more
   
   I have the Sniffer in persistent mode and loaded with Srvany
   I found many files I never seen in the Sniffer dir .SRV .FIN .XXX
 
   Which tests can I do to understand the problem ?
 
  It turns out that those files have always been there - but most of
  them (not the SRV) went away very quickly.
 
  Most likely during your transition your SNF workspace got clogged
with
  a lot of these and that is causing some problems.
 
  First thing to do is to shut down SMTP  SNF (your persistent
  instance) and clear out all of those job files. Each file
represents a
  sing scan job - the extension represents the status. With
everything
  shut down there should be none of these files so it's safe to
delete
  them.
 
  Once that is done you can start things up again and everything
should
  work normally.
 
  If not then the normal testing procedures should help you discover
the
  problem quickly.
 
  Hope this helps,
 
  _M
 
 
  --
  Pete McNeil
  Chief Scientist,
  Arm Research Labs, LLC.
 
 
  #
  This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
  To unsubscribe, E-mail to: [EMAIL PROTECTED]
  To switch to the DIGEST mode, E-mail to
 [EMAIL PROTECTED]
  To switch to the INDEX mode, E-mail to
[EMAIL PROTECTED]
  Send administrative queries to  [EMAIL PROTECTED]
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to
[EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]
 
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] After Updating MXGUARD

2007-06-27 Thread Alberto Santoni
Hello

After an update of MxGuard 1.7 - 3.1 the Sniffer doesn't work any more

I have the Sniffer in persistent mode and loaded with Srvany 
I found many files I never seen in the Sniffer dir .SRV .FIN .XXX

Which tests can I do to understand the problem ?
Best regards
Alberto Santoni




#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: Spam

2007-05-29 Thread Alberto Santoni
It is a wonderful tools! Thanks Andy

Nobody pays us for our work of reporting not cached messages.
The Sniffer staff should offer for free to our community this tools ;-)

Alberto


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Andy Schmidt
 Sent: 29 May 2007 23:39
 To: Message Sniffer Community
 Subject: [sniffer] Re: Spam
 
 I recommend SpamSource, if you are an Outlook user. It's a little
 toolbar
 applet that you can configure any recipient of the forwarded spam and
it
 will include all the original mail headers - just the way Sniffer,
Spamcop
 etc. like it.  All you do is press the button on the toolbar and the
 message
 will be forwarded, deleted from your inbox and not even appear in your
 sent folder (all configurable).
 
 Best Regards,
 Andy
 
 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of David Moore
 Sent: Tuesday, May 29, 2007 4:54 PM
 To: Message Sniffer Community
 Subject: [sniffer] Re: Spam
 
 Long time in getting back to you about this but:
 
 preferably to a spam collection pop3 box on your system
 
 I am happy to send it to a box called [EMAIL PROTECTED]
password
 sort!231#6eh will you arange for your bot to collect ?
 
 When I send spam to [EMAIL PROTECTED] in the past I have been
laborusly
 opening the header, coping header content, forwarding email, past
header
 content to beginning of email and sending is there a quicker way.
 
 If I send spam to  [EMAIL PROTECTED] how would I stop our
system
 from re tagging the email as spam from me.
 
 
 Regards David Moore
 [EMAIL PROTECTED]
 
 J.P. MCP, MCSE, MCSE + INTERNET, CNE.
 www.adsldirect.com.au for ADSL and Internet www.romtech.com.au for PC
 sales
 
 Office Phone: (+612) 9453 1990
 Fax Phone: (+612) 9453 1880
 Mobile Phone: +614 18 282 648
 
 POSTAL ADDRESS:
 PO BOX 190
 BELROSE NSW 2085
 AUSTRALIA.
 
 -
 
 This email message is only intended for the addressee(s) and contains
 information that may be confidential, legally privileged and/or
copyright.
 If you are not the intended recipient please notify the sender by
reply
 email and immediately delete this email. Use, disclosure or
reproduction
 of
 this email, or taking any action in reliance on its contents by anyone
 other
 than the intended recipient(s) is strictly prohibited. No
representation
 is
 made that this email or any attachments are free of viruses. Virus
 scanning
 is recommended and is the responsibility of the recipient.
 
 
 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Pete McNeil
 Sent: Monday, 14 May 2007 9:27 PM
 To: Message Sniffer Community
 Subject: [sniffer] Re: Spam
 
 Hello David,
 
 Monday, May 14, 2007, 2:59:16 AM, you wrote:
 
 Do not send spam to the sniffer@ list.
 
 Submit un-captured spam to [EMAIL PROTECTED], or preferably to a
spam
 collection pop3 box on your system that can be picked up by our bots.
 
 Thanks!
 
 _M
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch to
the
 DIGEST mode, E-mail to [EMAIL PROTECTED] To switch to
the
 INDEX mode, E-mail to [EMAIL PROTECTED] Send
administrative
 queries to  [EMAIL PROTECTED]
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: Spam

2007-05-14 Thread Alberto Santoni
Yes I agree also here we are having a real storm !!!
Alberto


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Chuck Schick
 Sent: 14 May 2007 16:46
 To: Message Sniffer Community
 Subject: [sniffer] Re: Spam
 
 Pete:
 
 It appears that you guys have it corraled for now.  The rate of
leakage
 has
 dropped again.
 
 Chuck Schick
 Warp 8, Inc.
 (303)-421-5140
 www.warp8.com
 
 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of Pete McNeil
 Sent: Sunday, May 13, 2007 3:51 PM
 To: Message Sniffer Community
 Subject: [sniffer] Re: Spam
 
 Hello Chuck,
 
 We are working on a sequence of very aggressive campaigns that started
 today. They started about 8 hours ago and haven't stopped. We are
catching
 up though.
 
 Looks like the blackhats decided to start the week early.
 
 _M
 
 Sunday, May 13, 2007, 1:05:45 PM, you wrote:
 
  We are seeing a lot of spam getting through.  running updates but
does
  not seem to be stopping it.
 
  Chuck Schick
  Warp 8, Inc.
  (303)-421-5140
  www.warp8.com
 
 
  #
  This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
  To unsubscribe, E-mail to: [EMAIL PROTECTED] To switch
to
  the DIGEST mode, E-mail to [EMAIL PROTECTED] To
switch
  to the INDEX mode, E-mail to [EMAIL PROTECTED] Send
  administrative queries to  [EMAIL PROTECTED]
 
 
 
 --
 Pete McNeil
 Chief Scientist,
 Arm Research Labs, LLC.
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] DNSBL

2007-02-28 Thread Alberto Santoni
Hello 

does someone have heavy problems with the DNSBLs? 

I have Imail server 2006.1 + mxguard + messagesniffer and it is since
about a week that my server has almost always the CPU at 100%.

I have stopped the check for all DNSBL but nothing has changed!

Any idea?
Alberto


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: DNSBL

2007-02-28 Thread Alberto Santoni
Yes I have the sniffer in persistent mode!
I suspect DSNBL because I see mxguard remain too long time for each
instance (I passed them from 8 to 6) 
I also have an increase in the overall number of messages ... many
Russian  ?windows-1251

I clean the spool dir each day 

Alberto


 -Original Message-
 From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf
 Of [EMAIL PROTECTED]
 Sent: 28 February 2007 21:16
 To: Message Sniffer Community
 Subject: [sniffer] Re: DNSBL
 
 You definitely want to be running in persistent mode.
 
 I automated that whole process a while back after upgrading to
 Win2003.  It deletes the .tmp  .gse files a couple times per
 day.  It flushes out the spool and spam folder for anything older
 than 5 days.  In the good ol' days,  I used to manually do all that
 at least once a day.  The old 2000 install had some corrupt files and
 I couldn't automate anything, yuck!
 
 At 12:10 PM 2/28/2007, you wrote:
 At 07:19 PM 2/28/2007 +0100, Alberto Santoni wrote:
  Hello
  
  does someone have heavy problems with the DNSBLs?
  
  I have Imail server 2006.1 + mxguard + messagesniffer and it is
since
  about a week that my server has almost always the CPU at 100%.
  
  I have stopped the check for all DNSBL but nothing has changed!
 
 - What makes you suspect DSNBL?
 - Have you seen an increase in the overall number of messages going
 through?
 - Are you using the sniffer persistant instance?
 
 - Check to see that the imail\spool\mx-pid folder isn't filling up.
I'm
 running IMail 7.06/mxGuard/Message Sniffer and at times when I've had
 problems the solution has been to empty that mx-pid folder.
 
 
 
 
 
 --
 Kirk Mitchell-General Manager[EMAIL PROTECTED]
 Keystone Connect Unlock Your World
 Altoona, PA  814-941-5000   http://www.keyconn.net
 
 
 
 #
 This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to
[EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]
 
 Thanks, Greg
 
 CoffeyNet/AllureTech   v 307-473-2323
 1546 E. Burlington  cell  307-259-7962
 Casper, WY  82601  fax 307-237-3709
 
 
 
 #
 This message is sent to you because you are subscribed to
   the mailing list sniffer@sortmonster.com.
 To unsubscribe, E-mail to: [EMAIL PROTECTED]
 To switch to the DIGEST mode, E-mail to
[EMAIL PROTECTED]
 To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
 Send administrative queries to  [EMAIL PROTECTED]



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



[sniffer] Re: Fwd: Newsletter HiTech Insider - n. 317 - 11/10/2006

2006-10-11 Thread Alberto Santoni








Please Filippo



Dont submit spam to this list 
use instead [EMAIL PROTECTED]

Regards

Alberto













From: Message Sniffer Community
[mailto:[EMAIL PROTECTED] On Behalf Of
Filippo Palmili
Sent: 11 October 2006 09:05
To: Message
 Sniffer Community
Subject: [sniffer] Fwd: Newsletter
HiTech Insider - n. 317 - 11/10/2006





Please include this on the sniffer rules.
Thanks
Filippo




thread-index: Acbs16ua41RVu3lDTDG9YCuK+hb+nw==
Thread-Topic: Newsletter HiTech Insider - n. 317 - 11/10/2006
From: Duke Editore [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Newsletter HiTech Insider - n. 317 - 11/10/2006
Date: Wed, 11 Oct 2006 03:50:46 +0200
X-Mailer: Microsoft CDO for Windows
2000
Priority: normal
X-OriginalArrivalTime: 11 Oct 2006 01:50:46.0981 (UTC)
FILETIME=[ABB94F50:01C6ECD7]
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 213.215.180.72 with
no reverse DNS entry.
X-RBL-Warning: FILTER-SUBJECT: Message failed FILTER-SUBJECT test (line 20,
weight 2)
X-Declude-Sender: [EMAIL PROTECTED] [213.215.180.72]
X-Declude-Spoolname: D4E3F0642028A74ED.SMD
X-Declude-Scan: Score [8] at 03:52:03 on 11 Oct 2006
X-Declude-Tests: REVDNS, FILTER-SUBJECT
X-RCPT-TO: [EMAIL PROTECTED]


Newsletter
HiTech Insider - n. 317 - 11/10/2006 - Gruppo Editoriale Duke Italia 





Se
ci sono problemi di visualizzazione clicca
qui 



Iscrizione - 
Cancellazione
Newsletter
 

Dalla redazione di Hi Tech Insider 

- I server high density entrano nel
mirino delle normative per i consumi elettrici?
- Sviluppo: come nel caso del
Web 2.0, contestato il termine SOA 2.0
- DRM (Digital Rights Management) contro DRM (Digital Restrictions Management):
chi ha ragione?


Per i testi di
questa sezione
Archivio delle
newsletter precedenti - Dossier On Demand - Internet
per le imprese




Anteprima
digitale
pdf - 1,5 MB
 

Dalla redazione di Windows  .NET Magazine

- Perché il patch management è essenziale in una politica di prevenzione attiva
- Virtualizzare o non virtualizzare? Ecco i casi in cui non è la soluzione ideale
- Microsoft e Intel a rischio
antitrust; Google spendacciona nel multimediale

Supplemento
sulla sicurezza (di Dario Forte):

- Nuove patch per Windows, Office e
.NET
- Fine del
supporto di XP SP1 (con scappatoia)

Per i testi di questa sezione
Archivio delle newsletter
precedenti - Copia saggio
rivista - Le notizie di Windows 
.Net Magazine






Anteprima
digitale
pdf - 4,1 MB  

Dalla redazione di iSeries NEWS

- Anticipazioni sulle novità 2007,
dal Power6 ai 4/5 GHz e otto core
- Nuovi dettagli sulle funzionalità supportate da i5/OS V5R5
- I punti di forza del System i: discussioni sul suo passato, presente e futuro
(Java-PHP?)

Per i testi di questa sezione
Archivio delle newsletter
precedenti - Copia saggio
rivista - Le notizie di iSeries News


Anteprima
digitale
pdf - 2 MB 


Dalla redazione di Linux Journal
- Ma quale crescita
rallentata! Linux cresce rapidamente anche in ambiente desktop
- Il pinguino inizia ad accorgersi di Niagara
- Anche Mandriva e Slackware si lanciano nelle soluzioni Linux di fascia
desktop 

Per i testi di questa sezione
Archivio delle newsletter
precedenti - Copia saggio
rivista - Le notizie di Linux Journal







Elenco dei 
dossier
on demand
 

Dalla redazione
di Hi Tech Insider

- IT low-cost: alcuni utili consigli sull'arte del taglio dei costi
- Ormai lo spamming è un'industria che utilizza gratis come dipendenti i PC
zombie 
- Gli attuali browser bloccano lo sviluppo delle nuove tecnologie in rete?

Per i testi di questa sezione
- Archivio delle newsletter
precedenti - Copia saggio
riviste Duke 



Elenco
di 
tutti i corsi
professionali
 

I corsi
professionali multimediali di Duke Italia

- Le Nuove Minacce: Pharming e Phishing (11 Slide)
- Risoluzione dei Problemi in Rete - Parte I (14 Slide)
- I nemici dell'utente IT: Phishing, Virus e Worms (16 Slide)

Elenco
completo dei corsi pubblicati - Dove
trovare un corso di saggio


Vuoi leggere i numeri precedenti? Ecco l'archivio
Questa newsletter e' stata inviata a 80.160 lettori: aiutateci a farla
conoscere inviandone una copia a un conoscente che fosse interessato!

Riservato
esclusivamente ai Responsabili di Sistemi Informativi e specialisti ICT
aziendali:
se non conoscete le nostre
riviste, potete chiederci l'invio gratuito di un numero di saggio

Il
Gruppo Editoriale Duke Italia garantisce il rigoroso rispetto del Dlgs 196/03 (testo unico privacy) e che
la mailing list verra' utilizzata solo per finalità editoriali. 
Copyright 2006. Proprieta' riservata. Registrazione del Tribunale di Milano n.
40 del
29/01/1996 

Direttore responsabile: Enrico Ortensi
Hanno collaborato: Andrea Desantis - Luca
Losio - Marco Ortisi - Paolo Piacentini 



Se
non desideri ricevere la nostra newsletter, CLICCA QUI! 








[sniffer] Re: Fwd: Newsletter HiTech Insider - n. 317 - 11/10/2006

2006-10-11 Thread Alberto Santoni








Hi Pete 

Yes I have an account on which I get only
SPAM . I will set a rules to delete only spam already recognized from
your sniffer.

Let me know at which address I have to
send the data for this account 

Alberto













From: Message Sniffer Community
[mailto:[EMAIL PROTECTED] On Behalf Of
Pete McNeil
Sent: 11 October 2006 14:29
To: Message
 Sniffer Community
Subject: [sniffer] Re: Fwd:
Newsletter HiTech Insider - n. 317 - 11/10/2006





Hello Alberto,



Wednesday, October 11, 2006, 4:14:46 AM,
you wrote:






 
  
  
  
  
  Please Filippo
  
  Dont submit spam to this list  use
  instead[EMAIL PROTECTED]
  
 






Yes! and also, if you have a
chronic spam, you can zip a copy of the message and include it as
an attachment to support@ along with your notes.



Also -



If you would like to contribute missed
spam on a regular basis and/or if you have clean spamtraps to share then we
prefer that you create pop3 accounts on your system to collect these spam so
that our bots can pick them up and queue them directly for processing.



Contact support@ for details on this.



Thanks,



_M



--

Pete McNeil

Chief Scientist,

Arm Research Labs, LLC.






#

This message is sent to you because you are subscribed to

  the mailing list sniffer@sortmonster.com.

To unsubscribe, E-mail to: [EMAIL PROTECTED]

To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]

To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]

Send administrative queries to  [EMAIL PROTECTED]

[sniffer] Experimental Abstract

2006-10-09 Thread Alberto Santoni
Hello

I'm getting storms of spam and Sniffer sets them as (Experimental
Abstract)
Can someone explain how have I to treat them?

Many thanks in advance
Alberto



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to  [EMAIL PROTECTED]



RE: Re[2]: [sniffer] Headers showing up in message body after switching to Mdaemon

2005-08-19 Thread Alberto Santoni
Hello 

I received messages of this kind me too. Then I must understand that the
cause is MDaemon and not iMail?

Alberto

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: venerdì 19 agosto 2005 20.03
To: Jim Matuska
Cc: [EMAIL PROTECTED]
Subject: Re[2]: [sniffer] Headers showing up in message body after switching
to Mdaemon

On Friday, August 19, 2005, 12:53:39 PM, Jim wrote:

JM Pete,
JM The switch in question was from Imail to Mdaemon,  so far so

I was almost hoping this was a switch to a new version of MDaemon
since this seems to be a new phenomena. Thanks for the data!

JM good other than a few misc bugs, I like the Mdaemon Sniffer 
JM integration much better than the declude integration.

We're hoping to go this route with other systems too-- but change is
slow. The MDaemon folks are very aggressive in seeking new
improvements :-)

snip/

JM Also Pete for some reason your message to the list got stuck
JM in the bad  message queue but I recieved my original post to the
JM list.  Any  thoughts?  Please cc: me direct [EMAIL PROTECTED] if
JM you can so I don't have  to read the response from my bad message
JM queue when it comes from the list. 

Can you check the headers for the SNF results and any other tests
which might have cause the message to get captured? There's something
there that needs to be fixed.

Thanks,

_M



This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html




This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: [sniffer] Smartermail

2005-03-15 Thread Alberto Santoni
If possible I'm interessed in this discussion me too
Thank you

Alberto
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Computer House Support
Sent: mardi 15 mars 2005 17:20
To: sniffer@SortMonster.com
Subject: Re: [sniffer] Smartermail

Hi Steve,

You wrote:
We are going to be moving to another mail package (you know why)...


I would very much like to hear your comments about Imail and any
difficulties you've encountered and why you feel the need to switch.  You
can write to me offline if you'd prefer.


Thank you,

Michael Stein
Computer House
[EMAIL PROTECTED]

www.computerhouse.com


This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html