[sniffer] Re: Merak integration problems

[Pete McNeil]

Hello Chris,

Monday, March 12, 2007, 1:07:37 AM, you wrote:

>	Fellow Listees…   I am currently running Merak Mail Server 8.9.1, and using my own implementation of Message sniffer as an antivirus scanner.

<snip/>

>	Anyone have any ideas?

Have you seen this:

http://forum.icewarp.com/viewtopic.php?p=3964&sid=09b684820aa495200c00be8857c42e6c

Or more specifically this:

aguk

Joined: 16 Oct 2006

Posts: 105

Posted: Mon Dec 18, 2006 11:01 pm    Post subject:
Well stupidly there is a Content Filter to make this work.  I have the following content filter and it appears to be working.  Code: <CONTENTFILTER><FILTER><ACTIVE>1</ACTIVE>  <TITLE>SNIFFER</TITLE>  <READONLY>0</READONLY>  <CONDITION><AND>1</AND>  <LOGICALNOT>0</LOGICALNOT>  <_expression_>6</_expression_>  <CONTAINTYPE>8</CONTAINTYPE>  <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>  <MESSAGESIZE>1</MESSAGESIZE>  </CONDITION>  <CONDITION><AND>1</AND>  <LOGICALNOT>0</LOGICALNOT>  <_expression_>4</_expression_>  <CONTAINTYPE>8</CONTAINTYPE>  <CONTAIN>D:\sniffer\snfrv2r3.exe xnk05x5vmipeaof7</CONTAIN>  <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>  <MESSAGESIZE>2</MESSAGESIZE>  </CONDITION>  <ACCEPT>0</ACCEPT>  <REJECT>0</REJECT>  <DELETE>0</DELETE>  <ENCRYPT>0</ENCRYPT>  <PRIORITY>0</PRIORITY>  <SCORE>1</SCORE>  <MARKSPAM>0</MARKSPAM>  <STOP>0</STOP>  <EXECUTE>0</EXECUTE>  <TARPITSENDER>0</TARPITSENDER>  <FIXRFC822>0</FIXRFC822>  <SMTPRESPONSE>0</SMTPRESPONSE>  <STRIPALL>0</STRIPALL>  <HEADER><VAL>0X-SNIFFER-FLAG: Yes  </VAL>  </HEADER>  </FILTER>  </CONTENTFILTER>  _________________ Andy  http://aguk.net

Hope this helps,

_M

-- 

Pete McNeil

Chief Scientist,

Arm Research Labs, LLC.

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>