Re: [sniffer] High False Positives

[Pete McNeil]

There was a bad rule yesterday. It was removed almost immediately but it 
looks like you missed the update until 1000pm. It takes a while to compile 
rulebase updates. Since you mention 4pm and 10pm I'm guessing you have your 
updates scheduled. A better method would be to trigger updates based on an 
update notification since this allows us to correct problems like this more 
quickly. If I've assumed wrong, please disregard.

Thanks,
_M
At 10:27 AM 3/25/2004, you wrote:
I had a high number of false positives yesterday starting after my 4:00 PM
(CST) Sniffer update. I believe it occurred about the time of the spam storm
yesterday, when many spam messages made it through the filter.
It appeared to stop at 10:00 PM but I don't know if people quit sending
messages for the day or if my Sniffer update fixed the issues.
I haven't seen any today (did some spot checks); do I need to submit all the
messages that were false positives?
Did something happen yesterday?

Al Thornberry

This E-Mail came from the Message Sniffer mailing list. For information 
and (un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html