Re[2]: [sniffer] Spam keeps getting through...
It is helpful to get the full headers, however it is simpler and more reliable in most cases to simply forward the message. _M On Tuesday, October 11, 2005, 4:46:48 AM, Kevin wrote: KR Can we just forward them regularly or do we need to change anything KR about how the headers display when we forward them? KR Pete McNeil wrote: On Monday, October 10, 2005, 7:55:51 PM, Serge wrote: S just to make sure, can we now send several spams as attachements in one S email S ans what adress to use S i have 3 that got thru my own mailbox in less than 3 hours S they did not even get tagged, only failed sorbs and sorbs_dul oops. missed a step. Please send (redirect/forward) spam that gets through one at a time to [EMAIL PROTECTED] Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- [This E-mail was scanned for viruses.] KR --- KR [This E-mail was scanned for viruses.] KR This E-Mail came from the Message Sniffer mailing list. For information and KR (un)subscription instructions go to KR http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Spam keeps getting through...
We attempt to create reliable rules no matter what language we see, however it is more difficult to do that in foreign languages. We are working on upgrades to our internal systems and procedures to address this. None the less there are usually things within these messages that we can tag and if we can identify them then we do create rules for those items. _M On Tuesday, October 11, 2005, 6:21:58 AM, Michiel wrote: MP Pete, MP I have an additional question. What do you do with spam in foreign MP languages, like dutch? Do you create rules for those as well? Lots of dutch MP messages are not blocked by sniffer. MP Regards, MP Michiel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: dinsdag 11 oktober 2005 10:47 To: sniffer@SortMonster.com Subject: Re: [sniffer] Spam keeps getting through... Can we just forward them regularly or do we need to change anything about how the headers display when we forward them? Pete McNeil wrote: On Monday, October 10, 2005, 7:55:51 PM, Serge wrote: S just to make sure, can we now send several spams as attachements in one S email S ans what adress to use S i have 3 that got thru my own mailbox in less than 3 hours S they did not even get tagged, only failed sorbs and sorbs_dul oops. missed a step. Please send (redirect/forward) spam that gets through one at a time to [EMAIL PROTECTED] Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- [This E-mail was scanned for viruses.] --- [This E-mail was scanned for viruses.] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html MP This E-Mail came from the Message Sniffer mailing list. For information and MP (un)subscription instructions go to MP http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Spam keeps getting through...
I will answer this later in the thread. _M On Tuesday, October 11, 2005, 7:44:01 AM, Kevin wrote: KR Sorry - I was talking about false positives. I assume we need to send KR false positives to the false@ address. KR Can my users send you these messages directly? KR Or do they need to forward them to me first (as the registered user)? KR And if they do need to forward false positives to me first, is it OK to KR simply forward them on to you? KR It says on your site to create a new email from scratch and send the KR false positive email as an attachment. Does that mean I should KR right-click on the message, Save As... an .eml file, and then attach KR that .eml file to the message I'm sending to you? KR And is this true for spam as well - do they need to forward them to me KR and then me to you? KR Just making sure I'm doing this right. KR Thanks KR Pete McNeil wrote: It is helpful to get the full headers, however it is simpler and more reliable in most cases to simply forward the message. _M On Tuesday, October 11, 2005, 4:46:48 AM, Kevin wrote: KR Can we just forward them regularly or do we need to change anything KR about how the headers display when we forward them? KR Pete McNeil wrote: On Monday, October 10, 2005, 7:55:51 PM, Serge wrote: S just to make sure, can we now send several spams as attachements in one S email S ans what adress to use S i have 3 that got thru my own mailbox in less than 3 hours S they did not even get tagged, only failed sorbs and sorbs_dul oops. missed a step. Please send (redirect/forward) spam that gets through one at a time to [EMAIL PROTECTED] Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- [This E-mail was scanned for viruses.] KR --- KR [This E-mail was scanned for viruses.] KR This E-Mail came from the Message Sniffer mailing list. For information and KR (un)subscription instructions go to KR http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html --- [This E-mail was scanned for viruses.] KR --- KR [This E-mail was scanned for viruses.] KR This E-Mail came from the Message Sniffer mailing list. For KR information and (un)subscription instructions go to KR http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Spam keeps getting through...
Spam should be sent one at a time... if you send them in groups then it is likely one or more will get removed by a new rule and the others will never be seen. Sending them one at a time also helps us to clarify details about the message and reduce any possible errors... our rule-techs are trained to skip anything they lose confidence in (including me!)... so if we have a batch of messages as attachments and it gets confusing, we skip ahead rather than creating errors. Thanks, _M On Monday, October 10, 2005, 7:55:51 PM, Serge wrote: S just to make sure, can we now send several spams as attachements in one S email S ans what adress to use S i have 3 that got thru my own mailbox in less than 3 hours S they did not even get tagged, only failed sorbs and sorbs_dul S - Original Message - S From: Pete McNeil [EMAIL PROTECTED] S To: Chuck Schick sniffer@SortMonster.com S Sent: Monday, October 10, 2005 11:08 PM S Subject: Re: [sniffer] Spam keeps getting through... On Monday, October 10, 2005, 5:44:21 PM, Chuck wrote: CS Sniffer is not catching a wave of spam (drug offers) this has been going on CS for over a week and I have been forwarding examples. Is there anything that CS can be done? Short additional follow up... Attached please find a graph of the trap arrival rates showing the current state of the front-end filters on our spamtraps... According to this instrumentation and my recent observations of our trap processing queues we have a good rule-set for the druglist campaign at the moment. That rulebase may not be completely deployed to everyone yet, but it is constantly being pushed out. The peaks on this graph today strongly coincide with bursts of new variants of the druglist campaign. If you look closely you can just spot an up-tic on the end indicating a new variant beginning, though we have already coded for it's basics. The big spikes at approximately 20, 10, and 8 hours ago represent the most recent bursts with new variants... so we're about due for another round with them that some of you may already be seeing. Hope this helps, _M S This E-Mail came from the Message Sniffer mailing list. For information and S (un)subscription instructions go to S http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re[2]: [sniffer] Spam keeps getting through...
On Monday, October 10, 2005, 7:55:51 PM, Serge wrote: S just to make sure, can we now send several spams as attachements in one S email S ans what adress to use S i have 3 that got thru my own mailbox in less than 3 hours S they did not even get tagged, only failed sorbs and sorbs_dul oops. missed a step. Please send (redirect/forward) spam that gets through one at a time to [EMAIL PROTECTED] Thanks, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
