[sniffer] False Positives

2006-02-23 Thread Kevin Rogers
So when I asked how I would send in false positives, someone mentioned that I should look up the appropriate log entry and send that in. That brings up another question. My log file is 270MB and climbing. I've never opened it cause it's too big. Do you have a reader for your log files? I

RE: [sniffer] False Positives

2006-02-23 Thread John Carter
, 2006 4:49 AM To: sniffer@SortMonster.com Subject: [sniffer] False Positives So when I asked how I would send in false positives, someone mentioned that I should look up the appropriate log entry and send that in. That brings up another question. My log file is 270MB and climbing. I've never opened

Re: [sniffer] False Positives

2006-02-23 Thread Pete McNeil
On Thursday, February 23, 2006, 5:48:55 AM, Kevin wrote: KR So when I asked how I would send in false positives, someone mentioned KR that I should look up the appropriate log entry and send that in. That KR brings up another question. My log file is 270MB and climbing. I've KR never opened it

[sniffer] False Positives

2006-02-15 Thread Kevin Rogers
My users have been getting a lot of FPs by Sniffer lately. They send me the email with the FULL HEADERS displayed and I forward this email on to SortMonster. The program they use to analyze incoming submissions check MY email headers, determine that SNIFFER was not at fault and sends me back

RE: [sniffer] False Positives

2006-02-15 Thread Jay Sudowski - Handy Networks LLC
Search your sniffer logs and include the log lines for that particular message. -Jay -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Wednesday, February 15, 2006 3:55 PM To: sniffer@SortMonster.com Subject: [sniffer] False Positives

Re: [sniffer] False Positives

2006-02-15 Thread Pete McNeil
On Wednesday, February 15, 2006, 3:54:50 PM, Kevin wrote: KR My users have been getting a lot of FPs by Sniffer lately. They send me KR the email with the FULL HEADERS displayed and I forward this email on to KR SortMonster. The program they use to analyze incoming submissions check KR MY email

RE: [sniffer] False Positives

2006-02-15 Thread Jim Matuska Jr.
PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, February 15, 2006 1:28 PM To: Kevin Rogers Subject: Re: [sniffer] False Positives On Wednesday, February 15, 2006, 3:54:50 PM, Kevin wrote: KR My users have been getting

Re: [sniffer] False Positives

2006-02-15 Thread Computer House Support
@SortMonster.com Sent: Wednesday, February 15, 2006 4:40 PM Subject: RE: [sniffer] False Positives Pete, Is there anyway to get an automatic response similar to the one listed below for the FP address, but for submissions to your spam@ address? It would be nice to get some feedback when submitting spam

Re[2]: [sniffer] False Positives

2006-02-15 Thread Pete McNeil
On Wednesday, February 15, 2006, 4:32:14 PM, Robert wrote: RG The X-SNF header. Sounds like a good idea. Is there a cheat sheet someplace RG for making that happen, if possible, in a Declude / Imail environment? RG Thanks ahead of time, In the distribution the option is described in the .cfg

Re[2]: [sniffer] False Positives

2006-02-15 Thread Pete McNeil
PROTECTED] JMJ JMJ -Original Message- JMJ From: [EMAIL PROTECTED] JMJ [mailto:[EMAIL PROTECTED] JMJ On Behalf Of Pete McNeil JMJ Sent: Wednesday, February 15, 2006 1:28 PM JMJ To: Kevin Rogers JMJ Subject: Re: [sniffer] False Positives JMJ On Wednesday, February 15, 2006, 3:54:50 PM

Re[2]: [sniffer] False Positives

2006-02-15 Thread Pete McNeil
On Wednesday, February 15, 2006, 4:48:43 PM, Computer wrote: CHS I second the motion. We have been submitting spam for over a year and I CHS don't know if a single one was received. In general, if you've not received an error during delivery, we most certainly got your message... it may have

[sniffer] False Positives

2006-01-18 Thread Ali Resting
Hi, Over the last 2 days I have seen a major increase in false positives. Literally all hotmail and yahoo address are being caught by sniffer inclusive of other legit domains. Please confirm what may be causing this and what I can do to resolve the issue. Regards, Ali --- This message was

[sniffer] False Positives

2006-01-18 Thread Ali Resting
Hi, Over the last 2 days I have seen a major increase in false positives. Literally all hotmail and yahoo address are being caught by sniffer inclusive of other legit domains. Please confirm what may be causing this and what I can do to resolve the issue. Regards, Ali --- This message was

Re: [sniffer] False Positives

2006-01-18 Thread Frederick Samarelli
] False Positives Hi, Over the last 2 days I have seen a major increase in false positives. Literally all hotmail and yahoo address are being caught by sniffer inclusive of other legit domains. Please confirm what may be causing this and what I can do to resolve the issue. Regards, Ali

Re: [sniffer] False Positives

2006-01-18 Thread Darin Cox
] Sent: Wednesday, January 18, 2006 8:42 AM Subject: Re: [sniffer] False Positives Same with me. Last night there was a rules update and it fixed the problem. Check the date of your rules update. - Original Message - From: Ali Resting [EMAIL PROTECTED] To: sniffer@sortmonster.com Cc

Re: [sniffer] False Positives

2006-01-18 Thread Pete McNeil
On Wednesday, January 18, 2006, 8:57:56 AM, Ali wrote: AR Hi, AR Over the last 2 days I have seen a major increase in false positives. AR Literally all hotmail and yahoo address are being caught by sniffer AR inclusive of other legit domains. AR Please confirm what may be causing this and what

Re[2]: [sniffer] False Positives

2006-01-18 Thread Pete McNeil
On Wednesday, January 18, 2006, 8:42:22 AM, Frederick wrote: FS Same with me. Last night there was a rules update and it fixed the problem. FS Check the date of your rules update. Please visit http://www.mail-archive.com/sniffer@sortmonster.com/msg02346.html and

Re[2]: [sniffer] False Positives

2006-01-18 Thread Pete McNeil
On Wednesday, January 18, 2006, 8:54:49 AM, Darin wrote: DC Agreed. We counted 100 false positives yesterday, compared to our normal DC rate of less than 5. DC No false positives since 6pm ET yesterday, though. Thank goodness. Please visit:

Re[4]: [sniffer] False Positives

2006-01-18 Thread Pete McNeil
On Wednesday, January 18, 2006, 2:14:34 PM, Darin wrote: DC Are you just blanket responding to every message to the list with this? If DC so, you might be wasting your time. I've been following the list, so I know DC things are back to normal after yesterday's snafu. Sorry about that... It

RE: [sniffer] false positives which catagories?

2005-08-11 Thread Keith Johnson
/2005 10:02 AM To: sniffer@SortMonster.com Subject: Re: [sniffer] false positives which catagories? I have my sniffer result histories by category posted at: http://it.farmprogress.com/declude/Testsbymonth.html Look about 90% down the page. - Original Message - From

Re: [sniffer] false positives which catagories?

2005-08-11 Thread Darin Cox
measurement. Darin. - Original Message - From: Keith Johnson [EMAIL PROTECTED] To: sniffer@SortMonster.com Sent: Thursday, August 11, 2005 8:13 AM Subject: RE: [sniffer] false positives which catagories? Scott, HS = Test says ham, final result was spam. This is an inaccurate ham

[sniffer] false positives which catagories?

2005-08-04 Thread Bonno Bloksma
Hi, I'd like to make a difference in the ways I score the varions sniffer catagories in Declude. I hold at 20 and have had the several sniffer catagories all at 19. As we are a school for tourism I score sniffer travel lower but I would like to score some catagories higher, at 20. If we

RE: [sniffer] False Positives.

2005-05-10 Thread Judy Burnett
McNeil Sent: Monday, May 09, 2005 6:49 PM To: Chuck Schick Subject: Re: [sniffer] False Positives. On Monday, May 9, 2005, 7:40:00 PM, Chuck wrote: CS I am all of a sudden having all of the mail from one of our hosted domains CS fail the sniffer-phishing. The domain is srinternational.com - could you

Re[2]: [sniffer] False Positives.

2005-05-10 Thread Pete McNeil
On Tuesday, May 10, 2005, 9:37:29 AM, Judy wrote: JB Pete, JB Can you send these kinds of emails to Hamed instead of me please. JB thanks I have changed your subscription. Please note you can alter your sniffer@ list subscription at any time. Information is on our help page:

[sniffer] False Positives.

2005-05-09 Thread Chuck Schick
I am all of a sudden having all of the mail from one of our hosted domains fail the sniffer-phishing. The domain is srinternational.com - could you please check on this. All of the emails are different - just from the same domain. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com This

Re: [sniffer] False Positives.

2005-05-09 Thread Pete McNeil
On Monday, May 9, 2005, 7:40:00 PM, Chuck wrote: CS I am all of a sudden having all of the mail from one of our hosted domains CS fail the sniffer-phishing. The domain is srinternational.com - could you CS please check on this. All of the emails are different - just from the same CS domain.