[sniffer] False Positive - how to react?

2007-09-26 Thread Stefan Paege
For the first (known) time I see Message Sniffer filter a valid mail. The mail is from my Dell salesperson containing a quote. This is from the IMail log: 20070926 091209 127.0.0.1 SMTPD (064801a658d9) [143.166.85.206] EHLO ausc60pc101.us.dell.com 20070926 091210 127.0.0.1 SMTPD

Re: [sniffer] False positive processing

2006-03-21 Thread Darin Cox
- From: Pete McNeil [EMAIL PROTECTED] To: Darin Cox sniffer@SortMonster.com Sent: Tuesday, March 21, 2006 11:21 AM Subject: Re: [sniffer] False positive processing On Tuesday, March 21, 2006, 9:38:46 AM, Darin wrote: DC DC DC Hi Pete, DC DC DC DC Are you getting behind on false positive processing

Re[2]: [sniffer] False positive processing

2006-03-21 Thread Pete McNeil
On Tuesday, March 21, 2006, 11:37:30 AM, Darin wrote: DC Nope. None of them. DC I haven't heard back from the replies to a couple of false positives on the DC 10th, and we haven't heard anything from our submissions on the 16th (6) and DC 17th (2). I don't remember if we've heard anything from

Re[4]: [sniffer] False positive processing

2006-03-21 Thread Pete McNeil
to investigate further and apply white DC rules. The others were normal FP reports. DC Thanks, DC Darin. DC - Original Message - DC From: Pete McNeil [EMAIL PROTECTED] DC To: Darin Cox sniffer@SortMonster.com DC Sent: Tuesday, March 21, 2006 11:52 AM DC Subject: Re[2]: [sniffer] False

[sniffer] False positive processing

2006-02-24 Thread Darin Cox
Pete, Thanks for the quicker turnaround in the last few days for false positive processing. We're seeing abouthalf day now. Much appreciated! Darin.

[sniffer] False Positive - no reaction?

2006-02-21 Thread Andy Schmidt
Hi, I filed this false positive report a day ago and never heard back. Just trying to see if my emails are blocked again. Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: Andy Schmidt [mailto:[EMAIL PROTECTED] Sent: Monday, February 20, 2006

Re: [sniffer] False Positive - no reaction?

2006-02-21 Thread Darin Cox
On average it takes 2 or three days to hear back on false positives. Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Tuesday, February 21, 2006 9:40 AM Subject: [sniffer] False Positive - no reaction? Hi, I filed this false positive

Re: [sniffer] False Positive - no reaction?

2006-02-21 Thread Pete McNeil
I'm a little behind. I'm going to do false positives in the next 10 minutes. I only have 20 to do it should go fast. Sorry for the delay. Thanks, _M On Tuesday, February 21, 2006, 9:40:07 AM, Andy wrote: AS Hi, AS I filed this false positive report a day ago and never heard back. AS Just

RE: [sniffer] False Positive - no reaction?

2006-02-21 Thread Andy Schmidt
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Tuesday, February 21, 2006 09:55 AM To: Andy Schmidt Subject: Re: [sniffer] False Positive - no reaction? I'm a little behind. I'm going to do false positives in the next 10 minutes. I only have 20 to do

Re[2]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Pete McNeil
On Tuesday, February 21, 2006, 10:16:11 AM, Andy wrote: AS Sorry - didn't mean to be pushy. I just thought that false positives are AS worse than missed spam, so I had assumed that they would always be at the AS top of the queue. It is a very tough balancing act. Don't feel bad at all - you're

RE: Re[2]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Andy Schmidt
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Tuesday, February 21, 2006 11:04 AM To: Andy Schmidt Subject: Re[2]: [sniffer] False Positive - no reaction? On Tuesday, February 21, 2006, 10:16:11 AM, Andy wrote: AS Sorry - didn't mean to be pushy. I just thought that false

Re: Re[2]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Scott Fisher
I like this idea more than the email notification. I really don't need more emails. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Tuesday, February 21, 2006 10:16 AM Subject: RE: Re[2]: [sniffer] False Positive - no reaction? Hi Pete

Re: Re[2]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Darin Cox
. Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Tuesday, February 21, 2006 11:16 AM Subject: RE: Re[2]: [sniffer] False Positive - no reaction? Hi Pete, I agree that the email notification is tricky - because you might respond

Re[4]: [sniffer] False Positive - no reaction?

2006-02-21 Thread Pete McNeil
On Tuesday, February 21, 2006, 11:16:43 AM, Andy wrote: snip/ AS The only other suggestion I have is to create a 24 hour 'queue' display on AS the web site. All you need to show is a column of the sender domain names of AS the email (not the entire sender email address). If I submit a false AS

[sniffer] False Positive - RESEND

2006-02-15 Thread Steve Guluk
Hello, Could you please tell me what would cause an email to fail rule # 831417 This was a good email flagged this morning and deleted. Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769 This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription

Re: [sniffer] False Positive

2006-02-15 Thread Pete McNeil
Answered off-list _M On Tuesday, February 14, 2006, 2:07:48 PM, Steve wrote: SG Hello, SG Could you please tell me what would cause an email to fail rule # 831417 SG This was a good email flagged this morning and deleted. SG Regards, SG Steve Guluk SG SGDesign SG (949) 661-9333 SG ICQ:

[sniffer] False Positive

2006-02-14 Thread Steve Guluk
Hello, Could you please tell me what would cause an email to fail rule # 831417 This was a good email flagged this morning and deleted. Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769 This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription

RE: Re[2]: [sniffer] False positive

2005-09-14 Thread John Tolmachoff (Lists)
, September 13, 2005 4:45 AM To: John Tolmachoff (Lists) Subject: Re[2]: [sniffer] False positive I have your response in my sent folder. I will send it again.. _M On Monday, September 12, 2005, 8:37:52 PM, John wrote: JTL I also have sent some false positives in the last 2 weeks

Re[4]: [sniffer] False positive

2005-09-14 Thread Pete McNeil
For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] JTL On Behalf Of Pete McNeil Sent: Tuesday, September 13, 2005 4:45 AM To: John Tolmachoff (Lists) Subject: Re[2]: [sniffer] False positive I have your response in my sent folder. I will send it again

Re[2]: [sniffer] False positive

2005-09-13 Thread Pete McNeil
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] JTL On Behalf Of Pete McNeil Sent: Friday, September 09, 2005 5:08 AM To: Ali Resting Subject: Re: [sniffer] False positive On Friday, September 9, 2005, 2:17:31 AM, Ali wrote: AR Hi Peter, AR I have submited 3

RE: [sniffer] False positive

2005-09-12 Thread John Tolmachoff (Lists)
To: Ali Resting Subject: Re: [sniffer] False positive On Friday, September 9, 2005, 2:17:31 AM, Ali wrote: AR Hi Peter, AR I have submited 3 email to [EMAIL PROTECTED] with all the required AR fields as per you instaructions on the website, I have not received any AR feedback whether

[sniffer] False positive

2005-09-09 Thread Ali Resting
Hi Peter, I have submited 3 email to [EMAIL PROTECTED] with all the required fields as per you instaructions on the website, I have not received any feedback whether this request has been effected. Regards Ali --- This message was scanned for viruses by the Real Image Anti-virus filters This

Re: [sniffer] False positive

2005-09-09 Thread Pete McNeil
Here is another copy of my initial reply. _M On Friday, September 9, 2005, 2:17:31 AM, Ali wrote: AR Hi Peter, AR I have submited 3 email to [EMAIL PROTECTED] with all the required AR fields as per you instaructions on the website, I have not received any AR feedback whether this request has

Re: [sniffer] False positive

2005-09-09 Thread Pete McNeil
On Friday, September 9, 2005, 2:17:31 AM, Ali wrote: Apologies to the list... I intended to send those responses directly. _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to

Re: [sniffer] False positive on whole domain

2005-08-06 Thread Pete McNeil
I'm pretty sure the rule that caused your trouble has been removed. _M On Thursday, August 4, 2005, 7:24:09 PM, Robert wrote: RM After two attempts to email support and two attempts to RM register a real false positive to [EMAIL PROTECTED], I would be RM really grateful for some

[sniffer] False positive on whole domain

2005-08-04 Thread Robert Mathias
After two attempts to email support and two attempts to register a real false positive to [EMAIL PROTECTED], I would be really grateful for some help. I suspect our email attempts may have failed to reach sortmonster. All email to and from one of our domains since about the 21st July is

Re: [sniffer] False positive on whole domain

2005-08-04 Thread Pete McNeil
We do respond to all false reports that are made to us if we can properly identify the sender - and often even if that is not the case. I will research this further and contact you off list. Thanks, _M On Thursday, August 4, 2005, 7:24:09 PM, Robert wrote: RM After two attempts to

[sniffer] False Positive?

2005-07-14 Thread Richard Farris
[EMAIL PROTECTED] Is there any reason this would be in the sniffer file...I tried to do some troubleshooting and finally just whitelisted their address...and they got itbut I don't think Declude was holding it...I have SNIFFER on Delete... Richard Farris Ethixs Online 1.270.247.

Re: [sniffer] False Positive?

2005-07-14 Thread Pete McNeil
pure-speculation There is a lot of symantec spam out there (that looks like it's not from them of course)... It's possible that something used in one of those made it into their auto confirm, or that a robot picked something up in a cross reference on a trap. /pure-speculation The only way to