RE: [sniffer] Imail server as a gateway
This is a question that is best asked on one of the Declude lists but the answer is yes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephen S Zappardo Sent: 16 March 2006 15:57 To: sniffer@sortmonster.com Subject: [sniffer] Imail server as a gateway If I sent my Imail server that is configured with declude and sniffer, to forward messages to another mail server, will declude and sniffer be ran on those emails? Thanks This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Rulebots gone wild
Andrew 378:1038 is a pretty good ratio, we're seeing something like 7:2 where 7 aren't tagged by Sniffer (SNIIFER-NOTFOUND) but which are marked by Decludes other tests and found to be SPAM. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: 19 January 2006 18:00 To: sniffer@SortMonster.com Subject: [sniffer] Rulebots gone wild By the way, Pete, thank you very much for publicly posting the URL where we could download FPSigIDs.csv so that we could work on recovering our own false positives. I was able to use this information to selectively re-test all of the messages detected by those rules. That was 2,449 messages. More than half of those were detected as spam by other Message Sniffer rules, leaving me with 1,038 messages that I re-queued in my Declude JunkMail Pro on Ipswitch Imail. For what it's worth, that 1,038 messages that did not trigger any rules in the new rulebase included 378 spam messages which were then caught by my Declude JunkMail Pro configuration. Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Thursday, January 19, 2006 9:15 AM > To: Jeff Alexander > Subject: Re: [sniffer] How can I > > On Thursday, January 19, 2006, 8:37:01 AM, Jeff wrote: > > JA> > JA> > JA> I have been having a lot of problems with the rules since Friday. > JA> > JA> How can I see what rules are set for spamming. > > There are many thousands of rules. For security purposes we don't > expose their content freely. If you have false positives, please > follow the false positive process and as part of that process, the > rules involved with any particular case will be shown to you. > > It's not clear from your note but most likely you're trouble is part > of a problem we had with our rule-bots a few days ago. The rule-bots > have been disabled and the bad rules they created have been rolled out > of the core rulebase. > > Hope this helps, > > _M > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
[sniffer] Sniffer not picking up spam
I get quite a lot of these starting with ... "Minnesota, which can clinch a wild-card playoff spot with a loss by either Carolina or St. Louis this weekend, appeared on its way to retaking the lead. But a holding penalty on Birk -- the Vikings were flagged nine times for 78 yards -- wiped out a 16-yard run by Michael Bennett that would have given them the ball at the Green Bay 40 just before the 2-minute warning." I'm reporting them but SNIFFER isn't picking them up. Any ideas? I've had quite a few over the past 3-4 weeks. David This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
[sniffer] Recent SPAM
Has anyone else seen a massive increase in SPAM not being caught by Messgae Sniffer recently? On a personal level I'm now seeing around 20-30 undetected junk emails per day whereas a couple of weeks ago it was of the order 2-5 emails a day. Sorry, I have have any quantitive figures at the moment. Regards, David This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Reporting - was: spam leakage up
XML is always our prefered format. Much easier to manage data with. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: 24 June 2004 19:00 > To: Aaron Caviglia > Subject: [sniffer] Reporting - was: spam leakage up > > We are working on specs for real-time reporting out of > Sniffer and haven't had a lot of feedback on the XML based > format. We were looking at this format because, in theory > anyway, it's easy to port into a database or even directly > into a web page or other format. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Scheduled Updates
I can confirm we're not getting notification emails to trigger updates. David This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Scheduled Updates
Sorry ignore last just found our notification email service sent out when sniffer is updated wasn't running (sorry) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Lewis-Waller Sent: 20 April 2004 17:12 To: [EMAIL PROTECTED] Subject: RE: [sniffer] Scheduled Updates Not sure if this is a specific issue but the Sniffer update hasn't updated since Monday at 02:1 BST (British Summer time GMT+1). Are there any issues at the moment? We have this triggered by an email normally. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 19 April 2004 14:24 To: [EMAIL PROTECTED] Subject: Re: [sniffer] Scheduled Updates At 03:33 AM 4/19/2004, you wrote: > > The following schedule is based on the first letter of your license ID. > > Schedules are separated by even and odd hours, and are further > > separated by 4 minutes for each letter within a given hour. > >Should we use this system also for uploading the log files? We do not appear to have a problem with uploads at this time, but in any case it would be a good idea to organize scheduled tasks in this way to minimize the possibility of a problem. Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Scheduled Updates
Not sure if this is a specific issue but the Sniffer update hasn't updated since Monday at 02:1 BST (British Summer time GMT+1). Are there any issues at the moment? We have this triggered by an email normally. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 19 April 2004 14:24 To: [EMAIL PROTECTED] Subject: Re: [sniffer] Scheduled Updates At 03:33 AM 4/19/2004, you wrote: > > The following schedule is based on the first letter of your license ID. > > Schedules are separated by even and odd hours, and are further > > separated by 4 minutes for each letter within a given hour. > >Should we use this system also for uploading the log files? We do not appear to have a problem with uploads at this time, but in any case it would be a good idea to organize scheduled tasks in this way to minimize the possibility of a problem. Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Call for beta testers... snfrv2r3b1
I'm a little confused about the .cmd file containing the persistent server directives. When it isn't running i.e. no-one logged into the server. Does Sniffer revert back to non-persistant mode and therefore negate any performance advantages persistant mode has? David This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Mixed case text
Pete, Yes it does help. Many thanks, I don't think our requiremnets are over and above the needs of an ISP proving a hosted mail service - at the moment at least. All the best, David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 13 March 2004 23:38 To: [EMAIL PROTECTED] Subject: RE: [sniffer] Mixed case text We have offered this ability on a limited basis to our OEMs and customers with large systems or special projects and discovered that the learning curve and support requirements become significant (far beyond what we can afford in our standard license) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Mixed case text
Pete, Can we create our own rules? David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 12 March 2004 23:46 To: [EMAIL PROTECTED] Subject: Re: [sniffer] Mixed case text At 12:48 PM 3/12/2004, you wrote: >Is there anyway we can detect emails where the body of the text is >randomn mixed case as is common in some types of junk email > >e.g. > >AmbGien XanVax ViagFra We can create rules that look for these. In fact we have many snake-oil rules that look for obfuscated drug names in the subject line. We do have to itterate through the permutations however - there is no algorythmic engine for this - yet. For example, we might code rules for the above using the following: _amb.ien_ _xan.ax_ _viag.ra_ In the coding language we use the _ (mark/underscore) represents whitespace and the . (dot) represents any nonwhitespace. Lower case letters match any case while upper case letters match only upper case. Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
[sniffer] Mixed case text
Is there anyway we can detect emails where the body of the text is randomn mixed case as is common in some types of junk email e.g. AmbGien XanVax ViagFra David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Boebel Sent: 12 March 2004 16:16 To: Sniffer Subject: [sniffer] shared object error I am trying to configure a test server that mirrors our live environment and I'm getting this error from Sniffer. I'm using Postfix, amavisd-new, SpamAssassin 2.63 patched, Sniffer. Any ideas?... Sniffer -> check failed: sniffer said: /spool/amavis/sniffer/j215ty1i.exe: error while loading shared libraries: libstdc++-libc6.2-2.so.3: cannot open shared object file: No such file or directory (sig=0,exit=127) at /usr/local/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Dns.pm line 988. Thanks, Bill This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] auto-update help
Kirk, The .vbs script (if it's the one I wrote) implements the Persits mail sender component which is installed on the server we use. You don't need to install this particular component it's just convenient for us. You could use CDONTS or a command line emailer such as BLAT (http://www.blat.net/) instead. Hope this helps. PROTECT YOURSELF FROM VIRUSES * Install an anti-virus program. * Keep it up to date * Get the latest patches and updates for your operating system * NEVER automatically open e-mail attachments * Download or purchase software from trusted, reputable sources * Make backups of important files Cofion cynnes, David Lewis-Waller WiSS Ltd Intec Ffordd y Parc Parc Menai BANGOR Gwynedd, LL57 4FG General Enquiries 0870 4329477 [EMAIL PROTECTED] Design Enquiries 0870 4329477 [EMAIL PROTECTED] Accounts 0870 4329477 [EMAIL PROTECTED] Administration 0870 4329477 [EMAIL PROTECTED] Support desk 0870 4329478 [EMAIL PROTECTED] Fax 0870 4329479 http://wiss.co.uk - Design http://wisshost.com - Hosting, email and domain services This email has been scanned for viruses by the WiSS mail server. See http://wisshost.com for further information. WEB design : WEB development : WEB hosting A Welsh Company Serving Business Worldwide -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kirk Mitchell Sent: 11 March 2004 02:19 To: [EMAIL PROTECTED] Subject: [sniffer] auto-update help I'm looking at using the david_sniffer .vbs update method located in the scripts section. I think I'm ok on getting the update ok, but it also appears to be able to send an email notifying the recipient that the dataset has been successfully updated. How would this be set up? Thanks, -- Kirk Mitchell-General Manager[EMAIL PROTECTED] Keystone Connect Unlock Your World Altoona, PA 814-941-5000 http://www.keyconn.net This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
