[sniffer] Re: RulePanic on 2908567

[Darin Cox]

Gotcha.  Thanks, Pete.

Darin.


----- Original Message ----- 
From: "Pete McNeil" <madscient...@armresearch.com>
To: "Message Sniffer Community" <sniffer@sortmonster.com>
Sent: Wednesday, February 03, 2010 10:06 AM
Subject: [sniffer] Re: RulePanic on 2908567


Darin Cox wrote:
> We're still seeing hits.  I assume the rule removal hasn't propagated to 
> our
> rulebase yet?
>
> BTW, we were seeing hits on the rule across a broad range of emails that
> related to passport.com.
>

The rule will be missing from your next update if it's not already gone
when you get this.
In any case your panic entry makes it inert.
The latest data from the rule panic watcher does not show any further
hits -- so it seems to be gone from most systems already.

_M


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>