Pete, if we have a significant number of hits, they'll be from all kinds
of IP sources.

Should we dump the GBUdb? If so, how?

The documentation is perfectly clear on how to tweak an IP or dump an IP
in the GBUdb, but doesn't mention a wholesale clearing of it.


Andrew.

 

-----Original Message-----
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On
Behalf Of Pete McNeil
Sent: Tuesday, June 17, 2008 12:46 PM
To: Message Sniffer Community
Subject: [sniffer] Re: Bad rule alert: 1940812


Hello, --- following up.

Intended to make the original post with a high priority flag.

Also - the rule was removed at approximately 15:10:00 EDT

Hope this helps,

_M

Tuesday, June 17, 2008, 3:35:47 PM, you wrote:

> Hello Message,

> Rule 1940812 has already been removed from the core rulebase.

> You can render the rule inert immediately by adding it to your rule
> panics list.

> Rule was coded at 13:03:17 EDT

> The rule was coded for an obfuscated version of the word Tuesday and
> was coded with a bad abstraction character.

> We sincerely apologize for the inconvenience.

> Best,

> _M




-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to