RE: [sniffer] YAhoo mails failing sniffer?

2005-09-22 Thread Colbeck, Andrew
Inversely, I just had a 419 scam come from a legitimate hotmail account, with a Yahoo! Email address as payload, and for the record, that email address (nor anything else) trigger a Sniffer detection. I've just submitted it to the spam@ address. Andrew 8) -Original Message- From:

Re[2]: [sniffer] YAhoo mails failing sniffer?

2005-09-22 Thread Pete McNeil
We are training some new folks... We had an issue where part of a tag line used by yahoo was captured from an AFF spam. We discovered in within a very short time and pulled the rule (we do very close review when training). During that short time, unavoidably, some rulebases would have been

Re[2]: [sniffer] YAhoo mails failing sniffer?

2005-09-22 Thread Pete McNeil
That is the one. That rule is already gone. Again, I apologize. It is all fixed now. Thanks, _M On Thursday, September 22, 2005, 12:29:27 AM, Matt wrote: M Quick follow-up. The bad rule appears to be 497585. M Matt M Marc Catuogno wrote: I'm seeing a few legit e-mails from Yahoo

RE: Re[2]: [sniffer] YAhoo mails failing sniffer?

2005-09-22 Thread Mike Wiegers
When we report these to false what kind of time frame should we get notifications back from AFF? I sent one of these from yahoo yesterday morning and haven't received anything. I can read it on the list before I receive anything from AFF. Thanks, Mike -Original Message- From: [EMAIL

RE: [sniffer] auto update tmp files

2005-09-22 Thread John Shacklett
Sorry I'm late. I had trouble for a while with the "del %1" functionality, but I had a problem with the script running in the wrong directory. I believe I added a "cd \sniffer2" type line and it worked thereafter like a charm. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: Re[2]: [sniffer] auto update tmp files

2005-09-22 Thread Dan Horne
Pete McNeil wrote on Thursday, September 22, 2005 11:24 AM: On Thursday, September 22, 2005, 9:51:31 AM, John wrote: Sorry I'm late. I had trouble for a while with the del %1 functionality, but I had a problem with the script running in the wrong directory. I believe I added a cd