Thanks for your proactiveness, Pete! We did not see any negative effect from the rule.

Darin.

-----Original Message----- From: Pete McNeil
Sent: Wednesday, March 19, 2014 2:42 PM
To: Message Sniffer Community
Subject: [sniffer] Bad rule report 6237276

Hi Sniffer Folks,

A short time ago Rule 6237276 was detected on our conflict instruments
and removed from the core rulebase. The rule was in place from
approximately 1130 to approximately 1400.

We recommend that if you have the ability to release messages matching
this rule from your quarantines and rescan them then please do so.

The rule was coded to catch a variant of the "/goo.gl/ link" spam and
was coded too broadly. The rule was removed when we identified it on our
IP/Rule conflict instruments and reexamined it. It's signature on the
conflict instrument is already falling dramatically and we expect that
most systems auto-panicked the rule making it inert automatically.

We are very sorry for any trouble.

Best,

_M

--
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <sniffer@sortmonster.com>.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>
To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>
To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>
Send administrative queries to  <sniffer-requ...@sortmonster.com>

Reply via email to