EMail Spam Analysis Tools - Expert Reports on Spam

 

We created a new F.A.Q. section for ESATInformer.

Click to open the Knowledge Base

or enter a ticket at our online support center at

www.emailprofessor.com/support-center

 

 

 

 

Is there any meaning to the word ESAT?

ESAT is a short for EMAIL SPAM ANALYSIS TOOL. In order to fight spam you have to know where and what it is. ESATInformer supplies Email Spam Analysis on multiple levels for the Administrator and the User.

Is ESATInformer compatible with XWall 3.28 or newer

Yes ESATInformer is fully compatible with XWall 3.28 , all 3.29 and the version 3.30 including betas. ESATInformer version 1.7 will allow you to upgrade XWall during the day and adjusts to the changing SR file layout. Please note: the new feature reports are available on the next full day SR file.

Which version of Windows do I need?

ESATInformer runs on all Windows platforms which Microsoft provides a .NET environment. That's all modern version and as far back as Windows NT 4.0. ESATInformer will operate on servers and workstations.

Why do I need .NET?

Microsoft developed the .NET platform to be a safe environment. Esatinformer takes advantage of that. The .NET environment is part of the Windows operating system. If it's not installed on your system already you can download .NET directly from Microsoft

.

How do I enable the Archive in XWall?

In XWall 3.28 or older: Admin go to OPTION-> GENERAL-> LOGFILES. Put check mark next to "KEEP MESSAGE FILES".

In XWall 3.29 Admin go to OPTION-> GENERAL-> HISTORY. Put check mark next to "KEEP COPY MESSAGE FILES" If you are limited by space on your hard drive you can limit the size of the archive by a number of days. Also the archive can now be moved to a different folder or drive. Exclude the archive in you virus scanner.

XWall updates and ESATInformer

BEFORE ESATI 1.8 If you update your XWall installation to a newer version the SR file layout may not be the same. ESATInformer usually can adjust to the new format. However there maybe an issue when the format changes in the middle of the file. This happens when you update XWall during the day. It's best to do updates at midnight. However you may not be able to do that. In that case do the following steps.

  1. Stop XWall (service or program
  2. Run ESATAdmin ->informer ->all ->today ->email (that generates the typical midnight reports
  3. Rename the SR file XWall writes to for today.(Example. SR040111.csv to SR040111a.csv)
  4. upgrade XWall and start

ESATInformer will send it's usual midnight report from the data XWall collects starting at the upgrade time till midnight. Everything will be back to normal in the next SR file.

ESATI 1.8 and newer will adapt automatically to most new XWall sr file situations.

Trouble with the key code

A few things to consider when entering the key code:

  • The License To field must be typed in EXACTLY as in the license Email
  • All key codes are in UPPER CASE
  • There are no "O" (the character o) in the keycode only 0 (zero)

After updating reports don't look right

ESAT reports are style sheet based (CSS) From time to time we need to make adjustments to the style sheet. Updating ESATInformer will not overwrite the CSS files to protect your possible modifications. You must manually delete the CSS file(s). You need to delete the file(s) before installing the update. Always check the UPGRADE page before installing the new ESATInformer. We list any file that needs to be deleted prior to the install of the new ESATInformer.

What's the memory requirement

ESATInformer is a compact program. However the MS .net environment will take some ram to operate. ESATInformer processing a 100,000 line SR file may take temporally up to 200 megs of ram. Of course 100,000 lines equal 100,000 messages per day. That is a substantial operation. In smaller installation figure about 10 megs for .net and 2k per message. The heavy load occurs typically after midnight but should only last a few minutes even with 100,000 messages to process.

ESATInformer & Windows scheduler

While ESATAgent scheduled the basic ESATinformer runs you may want to add others by using the MS scheduler. The Scheduler may not be available in Windows NT. Make sure the scheduler executes the program. A common mistake it to but the auto switch inside the quotes.

  • Wrong syntax: "C:\program files\sidebit\ESATInfoermer\ESATInformer.exe auto "
  • Correct syntax: "C:\program files\sidebit\ESATInfoermer\ESATInformer.exe" auto

What are the command line switches for ESATInformer?

We're adding more switches as we go. Currently there are two switches available.

    DateControl
    Auto Generates report using yesterdays SR file
    Today Generates report using toady's SR file
    030906 Generates report using the SR file dated 300906 (Sept. 06 2003)

     

    Report Mode
    Admin Generate only the admin report.
    User Generate only the user reports.
    All Generate both Admin and User reports. Default
    Single Generate a user report for specific user. The user email address must be specified after the word "Single"

     

    OutputMode
    Email the reports will be emailed to address or admin address
    File the reports will be written to a file

     

    OutputLocation
    Specifies the location to send output to. If the output mode is "file" then this specifies the file name. If the output mode is "email" then this is an email address. If this parameter is missing, the normal output location is used.

     

Command Line Examples

  • ESATInformer Auto
    Generate both admin and user reports, deliver them via email to the standard addresses.
  • ESATInformer Auto Admin
    Generate only the admin report. Deliver it via email.
  • ESATInformer Auto Admin File xyz.htm
    Generate only the admin report. Create it as a file named xyz.htm.
  • ESATInformer Auto Single johndoe@yourdomain.com Email anotheruser@yourdomain.com
    Create a report for the specific user, email it to another user.
  • ESATInformer Auto Single johndoe@yourdomain.com File D:\esat\
    Create a report for the specific user, report to file and file location

 

What are EXCLUDED users?

Excluded users are users NOT listed in the ESATInformer userlist.txt. These users are shown in the HTML administrator report in gray (a lighter color) and will not receive an user report. The users which do receive the their reports are listed in black.

All users get Zero Spam reports

Check your USERLIST.TXT file. The file must be plain ASCII text. Make sure you don't have any spaces or tabs on the end of the user addresses..

When is the next version available and what about Betas?

We are always working to improve the ESATTools. The official releases have a 30 active live in DEMO mode, Once licensed the product never expires.

Beta versions are available between official releases. The Beta version have an expiration date, That insures that if there is a problem with a Beta release it won't linger around forever.

How do I make ESATAgent a Service

It's on our TO-DO list. However you can make ESATAgent a service using FireDaemon. The installation is easy.

 

I can't get the license to work

Make sure you type the company name line EXACTLY as we sent it to you. If there is a misspelling please contact us. The license will not work if you type a different name in the company line.

 

What about the Pop3 account ?

ESATInformer Tools need a POP3 account on your Exchange server as link between the user and ESATAgent. Typically you call the account ESAT@yourdomain.com. DO NOT use your amount for ESATInformer. Agent would get all your regular mail.

 

I like what I see but how about adding .....

Thank you for you're interest in our product. If you have suggestions please email us at support@esatinformer.com or place your request in the forum.

 

There is no manual with the download

Yes the manual is currently online only on this web site. Please look under HELP -> MANUAL.. You should find all the information regarding installation and configuration. The manual also contains links to the required pre-installs.

 

What's the "R" in the user report?

The "R" is a link the users can click. It will trigger an email to the ESATAgent requesting the message it was listed with. The user would do this to retrieve a false positive or a message he likes to see. Also if you park the cursor on top of the "R" it will show you which filters blocked the message. That really helps for messages without subject.

What's the number on each line in he user report?

The number indicates how many XWall filters catch that message. It assists the user when making a decision to retrieve a message or not. It's very unlikely that a message caught by 3 filter is not spam.

ESATAgent won't process the request

These are some of the causes why your users do not get a report. . Most people have problems with the "[cmd]" and the comma and spaces issue. Setting up the formatter key in the ESATInformer config file.

<add key="RetrieveRequestFormatter" value="Mailto:ESATAgent@yourdomain.com?subject=ESATAgent Command&amp;body=[cmd]Retrieve Message Request, {1), {2}, {3}, {4}[cmd]" />

CHECK

  • Please note there are SPACES following each COMMA.
  • [cmd]Retrieve Message Request, {1), {2}, {3}, {4}[cmd]

CHECK

  • Note: there are no longer # sign at the beginning and end of the request string use [cmd] instead
  • [cmd]Retrieve Message Request, {1), {2}, {3}, {4}[cmd]

CHECK

Another Issue is the use of the "&" sign. You need to combine the & with amp.

Command& - Incorrect
Command&amp - Correct

Esatadmin error at startup

It's possible there is something wrong with your .NET environment. We have a simple test program. Download it and see if you can run it. Should the program not run your Net environment is not functioning.

Download ESATTest

Why are no blue "R"s in the user reports?

Check your ShowStorage key in the ESATInformer config files (or in ESATAdmin->ESATInformer->Showstorage) To Allow Retrieval of messages the key value needs to be YES. Any other value will not display the "R".

Why are there just number when I print the report?

Your settings in Internet explorer are set to not print the background or images. Start your Internet Explorer and change the setting in Tools->Internet options->advanced->printing. Check Print Background colors and images

How can a user request his spam report

To request a spam report your users can send a request message to ESATAgent at anytime. The example below shows how to request the current report

  • Open new message in Outlook
  • Type in your ESATAgent mailbox address (esat@yourdomain.com
  • Subject line must match the subject key set in the informer and agent config RetrieverRequestFormatter-> Mailto:ESAT-Agent@qm.com?subject=ESATAgent Command&body=[cmd]Retrieve Message Request, {1}, {2}, {3}, {4}[cmd]
  • Type this in the message body: [cmd]informer run, today, single, user@yourdomain.com[cmd]
  • Don't spell check , send message

What's newer ESATI 1.2 or 1.15

The ESATInformer 1.13 is a lot newer. the version count goes like this. 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13 and so on.

 

How do I merge multiple accounts?

ESAT does not yet support a merge option. However you may can use XWalls capability to translate mailboxes. To translate an address go to XWall Admin. View-translate-mailbox.

How do I turn off the greylisting for the user reports?

Set the key "IncludeSMTPBlock/InUserReport" to NO

 

I have exception errors after installing ESAT 1.15

ESATInformer 1.15 is compatible with XWall 3.31. The SP files in XWall 3.31 are very different. If you happen to install both XWall 3.31 and ESAT 1.15 the same time your ESAT is processing yesterdays SP and SR files and they were produced by XWall 3.30 or older. To get around the error just delete the SP files created by the older version of XWall.

 

I get an exception "Cannot delete message"

ESATInformer 1.15 may have a problem deleting messages which do not belong in it's mailbox. The problem has been corrected. in newer release.

 

How do the users get an INSTANT SPAM REPORT?

As of version 1.17 the only thing you need to do is set the ESATInformer key "Userlink" to YES. This will add links to the user report for spam reports of past days and the TODAY report which contains all blocked messages for Today up to the time the report was

requested.

Why does the Today link not show up in the User Report?

Make sure you have set the ESATInformer key "Userlink" to YES

 

I get the same exception report over and over again.

ESAT is set to not delete unprocessed messages. However there is a incorrectly configured massage in the ESAT pop account. This message causes ESAT to send you an exception report. Since it's set not to delete the message you get it over and over again. In ESATAgent set the key DeleteUnProcessedMessages to YES and the problem will stop. Make sure the ESATAgent is not running (stop the service) while applying the changes.

 

When I click the "R" I get a blank message

Esat will create a message to ESATAgent asking for the message you want retrieved. Using the defaults the message is addresses to ESATAgent, the subject is ESATAgent Command and the text in the message body starts and ends with [cmd] . IF you do not see any body text check your RetrieveRequestFormatter key. Loaf ESATAdmin, open the ESATInfoermer tree and look for the key about 10 keys down. Look for the String ....... ESATAgent Command&body. Maybe your string reads EASTAgent Command&amp;body. If so remove the amp; close the key and save your settings. Double check if the amp is gone. Once confirmed re-run the user reports.

Esat reports quit working after installing XWall 3.33

If you have a German Windows version the labels on the SR and SP statistics files will now be in German. Please download ESATInformer version BETA 1.21.1 od ESAT 1.22 to correct the problem.

 

 

 


 
 
Copyright 2003 Ceratec Inc. Elgin, TX 78621 Contact: info@ceratec.net