Thanks Pete, that did the trick! Although after importing the filter it's a bit stange how it actually works (I can't find the logic listed after importing it into the GUI), but it does actually work well.
Thank You, Chris Bunting Lancaster Networks Direct: 717-278-6639 Office: 888-LANCNET x703 MS Certified Systems Engineer IP Telephony Expert -------------------------------------------------------- Lancaster Networks 1085 Manheim Pike Lancaster PA 17601 www.lancasternetworks.com ---------------------------------------------------------------------- Corporate Technology Solutions... Specializing in 3com NBX Telephony Solutions IT Services - Phone Systems - Digital CCTV ---------------------------------------------------------------------- The information in this e-mail is confidential and may be privileged or subject to copyright. It is intended for the exclusive use of the addressee(s). If you are not an addressee, please do not read, copy, distribute or otherwise act upon this email. If you have received the email in error, please contact the sender immediately and delete the email. The unauthorized use of this email may result in liability for breach of confidentiality, privilege or copyright. From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, March 12, 2007 7:23 AM To: Message Sniffer Community Subject: [sniffer] Re: Merak integration problems Hello Chris, Monday, March 12, 2007, 1:07:37 AM, you wrote: > Fellow Listees... I am currently running Merak Mail Server 8.9.1, and using my own implementation of Message sniffer as an antivirus scanner. <snip/> > Anyone have any ideas? Have you seen this: http://forum.icewarp.com/viewtopic.php?p=3964&sid=09b684820aa495200c00be 8857c42e6c Or more specifically this: aguk Joined: 16 Oct 2006 Posts: 105 Posted: Mon Dec 18, 2006 11:01 pm Post subject: ________________________________ Well stupidly there is a Content Filter to make this work. I have the following content filter and it appears to be working. Code: <CONTENTFILTER><FILTER><ACTIVE>1</ACTIVE> <TITLE>SNIFFER</TITLE> <READONLY>0</READONLY> <CONDITION><AND>1</AND> <LOGICALNOT>0</LOGICALNOT> <EXPRESSION>6</EXPRESSION> <CONTAINTYPE>8</CONTAINTYPE> <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER> <MESSAGESIZE>1</MESSAGESIZE> </CONDITION> <CONDITION><AND>1</AND> <LOGICALNOT>0</LOGICALNOT> <EXPRESSION>4</EXPRESSION> <CONTAINTYPE>8</CONTAINTYPE> <CONTAIN>D:\sniffer\snfrv2r3.exe xnk05x5vmipeaof7</CONTAIN> <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER> <MESSAGESIZE>2</MESSAGESIZE> </CONDITION> <ACCEPT>0</ACCEPT> <REJECT>0</REJECT> <DELETE>0</DELETE> <ENCRYPT>0</ENCRYPT> <PRIORITY>0</PRIORITY> <SCORE>1</SCORE> <MARKSPAM>0</MARKSPAM> <STOP>0</STOP> <EXECUTE>0</EXECUTE> <TARPITSENDER>0</TARPITSENDER> <FIXRFC822>0</FIXRFC822> <SMTPRESPONSE>0</SMTPRESPONSE> <STRIPALL>0</STRIPALL> <HEADER><VAL>0X-SNIFFER-FLAG: Yes </VAL> </HEADER> </FILTER> </CONTENTFILTER> _________________ Andy http://aguk.net Hope this helps, _M -- Pete McNeil Chief Scientist, Arm Research Labs, LLC. ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
