sniffer  

[sniffer] Re: RulePanic on 2908567

Darin Cox
Wed, 03 Feb 2010 06:55:26 -0800

We're still seeing hits.  I assume the rule removal hasn't propagated to our 
rulebase yet?

BTW, we were seeing hits on the rule across a broad range of emails that 
related to passport.com.

Darin.


----- Original Message ----- 
From: "Pete McNeil" <madscient...@armresearch.com>
To: "Message Sniffer Community" <sniffer@sortmonster.com>
Sent: Wednesday, February 03, 2010 9:41 AM
Subject: [sniffer] Re: RulePanic on 2908567


Darin Cox wrote:
> We're noticing a lot of FPs on this rule, and have added a RulePanic
> entry.
>
> Pete, is there a problem with it?
The rule was for passport.com -- it has already been removed.

_M


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>