[sniffer] False Positive - how to react?

2007-09-26 Thread Stefan Paege
For the first (known) time I see Message Sniffer filter a valid mail. The mail is from my Dell salesperson containing a quote. This is from the IMail log: 20070926 091209 127.0.0.1 SMTPD (064801a658d9) [143.166.85.206] EHLO ausc60pc101.us.dell.com 20070926 091210 127.0.0.1 SMTPD

[sniffer] Re: False Positive - how to react?

2007-09-26 Thread Pi-Web - Frank Jensen
For the first (known) time I see Message Sniffer filter a valid mail. What is the best way to handle stuff like this? Check out this page: http://kb.armresearch.com/index.php?title=Message_Sniffer.FAQ.FalsePositives # This

[sniffer] Re: False Positive - how to react?

2007-09-26 Thread Stefan Paege
Frank, thanks for your answer. Seems like i'm too dense to get it. The step by step instructions tell me: 4. Attach the message that was captured incorrectly. How should I do that? I don't have that message because it got filtered and deleted by Sniffer. For the first (known) time I see

[sniffer] Re: False Positive - how to react?

2007-09-26 Thread Pi-Web - Frank Jensen
Ok, I guess the instruction is for people who filter spam to a spam folder... ;-) I think you should contact [EMAIL PROTECTED] I think they will able to remove the rule based on you sniffer log, perhaps the only will remove it for your system. One other problem - the first entry og the log

[sniffer] Re: False Positive - how to react?

2007-09-26 Thread Pete McNeil
Hello Stefan, Normally attaching the message is as easy as dragging and dropping it into your note to [EMAIL PROTECTED] If you have a quarantine folder then dragging the message file on to your message as an attachment also usually works (YMMV - not all email clients work this way). Since you

[sniffer] Re: False Positive - how to react?

2007-09-26 Thread Pete McNeil
Hello Pi-Web, Wednesday, September 26, 2007, 10:41:51 AM, you wrote: Ok, I guess the instruction is for people who filter spam to a spam folder... ;-) I want to make one additional comment here -- It is true that most folks filter to a temporary quarantine and so that is probably to be