Sniffer has a rule base that they code based on spam they receive. Depending on the type of spam it is (porn, av, hosting, etc) they place that rule in an appropriate category. When sniffer scans a message it will return a code. The code that is returned is what you will use in your Declude rules. For example if the code returned is the code associated with porn spam I assign it a certain amount of weight. However, if the code returned from sniffer is from their experimental rule category I assign it a much lower weight.
I hope this helps.
Darrell
------------------------------------------------
Check Out DLAnalyzer a comprehensive reporting tool for
Declude Junkmail Logs - http://www.dlanalyzer.com
T. Bradley Dean writes:
How does Sniffer work?
Their web page says:
"In the best implementations allow you to assign a weight to each possible
result code. Declude, mxGuard, and SpamAssassin are all good examples of
systems that allow weights to be assigned to the result codes from Message
Sniffer."
So if Sniffer says an email is porn spam then it gets a weight of 10, but if
it's web hosting spam then it's 8? Does the weight differ depending on how
confident Sniffer is?
What do these rules look like in Global.cfg on $Default$.junkmail?
~Brad
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Tuesday, December 02, 2003 7:54 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] sniffer
Sniffer's well worth the $300.00 per year.
That breaks down to less than $1.00 per day.
It catches content that some RBLs don't catch.
Mark
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Anderson
Sent: Tuesday, December 02, 2003 10:28 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] sniffer
It's not worth paying the subscription fee, in my opinion. I have a client that's paying for it, and it doesn't catch very much that isn't already caught somewhere else.
> I am considering Maps too. But it's $1500/yr. Anyone using them?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
