> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Ron DuFresne > Sent: Wednesday, May 15, 2002 10:40 AM > > > ---------- Forwarded message ---------- > Date: Wed, 15 May 2002 12:25:08 -0500 > From: System Attendant <[EMAIL PROTECTED]> > To: 'Ron DuFresne' <[EMAIL PROTECTED]> > Subject: ScanMail Message: To Sender, > sensitive content found and action t aken. >
<Snip> > **************** eManager Notification ***************** > > The following mail was blocked since it contains sensitive content. > Rule/Policy: Profanity > Action: Quarantine to C:\Program > Files\Trend\SMCF\Quarantine\2002-05-15\13-25-35.22757 > > Content filter has detected a sensitive e-mail. > > ******************* End of message ********************* How interesting, I wonder what filling up the C: does to a mail filtering system? Does it reject mail with 400 or 500 series errors? Or does it silently drop the message as it tries to spool to disk? I wonder how badly can you trash the logs, which are also presumably also being logged to C:\ as well. Filtering on profane words is generally a bad idea, because high risk of false positives, as we've seem here. Rejecting email of a potentially big client, who is looking for a new vendor? Even if it is stored to disk, if the false positive rate is high enough, the admin isn't likely to manually approve them daily, they are probably block deleted or approved. Sameer _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] For Account Management (unsubscribe, get/change password, etc) Please go to: http://lists.gnac.net/mailman/listinfo/firewalls
