Sniffer version 2 is out now. Scumware rules have a special symbol 62. You could look for that specific result code and treat it specially.
Currently all other spam rules are coded to the "generic" group with a symbol of 63. That should make it simpler. Hope this helps, _M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of | Sheldon Koehler | Sent: Wednesday, December 04, 2002 5:51 PM | To: [EMAIL PROTECTED] | Subject: Re: [Declude.JunkMail] Filtering E-Greetings | | | Since we have to use Sniffer as a weighted test and these are | only failing the Sniffer test, how can I safely block these greetings? | | We have too high of a volume to hold email as it would take a | full time staff person to just search the rejects, so we are | forced to delete. | | | Sheldon | | | Sheldon Koehler, Owner/Partner http://www.tenforward.com | Ten Forward Communications 360-457-9023 | Nationwide access, neighborhood support! | | "Whenever you find yourself on the side of the majority, it's | time to pause and reflect." Mark Twain | | | | ----- Original Message ----- | From: "Madscientist" <[EMAIL PROTECTED]> | To: <[EMAIL PROTECTED]> | Sent: Tuesday, December 03, 2002 2:25 PM | Subject: RE: [Declude.JunkMail] Filtering E-Greetings | | | > Junkmail with Message Sniffer will also handle it. | > | > All of these and more are included in the Message Sniffer "Scumware | > Greetings" rule group (Symbol 62). We are still looking for | a reliable | > source for additional domains as they arise. | > | > This was an experimental group but we have had no false positive | > reports on these rules so it looks like it will stay in place. | > | > _M | > | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
