RE: [sniffer] YAhoo mails failing sniffer?
Inversely, I just had a 419 scam come from a legitimate hotmail account, with a Yahoo! Email address as payload, and for the record, that email address (nor anything else) trigger a Sniffer detection. I've just submitted it to the spam@ address. Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Matt > Sent: Wednesday, September 21, 2005 9:29 PM > To: sniffer@SortMonster.com > Subject: Re: [sniffer] YAhoo mails failing sniffer? > > Quick follow-up. The bad rule appears to be 497585. > > Matt > > > > Marc Catuogno wrote: > > >I'm seeing a few legit e-mails from Yahoo failing sniffer. > Anyone else? > > > >--- > >[This E-mail scanned for viruses by Declude Virus] > > > > > >This E-Mail came from the Message Sniffer mailing list. For > information > >and (un)subscription instructions go to > >http://www.sortmonster.com/MessageSniffer/Help/Help.html > > > > > > > > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] YAhoo mails failing sniffer?
Quick follow-up. The bad rule appears to be 497585. Matt Marc Catuogno wrote: I'm seeing a few legit e-mails from Yahoo failing sniffer. Anyone else? --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] YAhoo mails failing sniffer?
I noticed some as well. We received one confirmed fp report, which I sent in yesterday, but a look at the logs showed potentially up to 5 messages that were sent from legit Yahoo mail servers, that could have been legit mail that sniffer caught. Still haven't received a response on the fp submission either. Thanks! - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Van Hefner Sent: Thursday, September 22, 2005 12:24 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] YAhoo mails failing sniffer? I got a record number of false-positives from Sniffer yesterday. The category was always "Scam Patterns". Two of them were from Yahoo! as well. Although the total was low (something like four FP's total), that is more in one day than I usually see in a month with Sniffer. There must have been some incredibly-badly written code that slipped though, as they were personal e-mails that should never have been tagged. Personal e-mails are really the only ones that I truly consider false positives. I get dozens of mailing list messages trapped each month, but I don't consider those a big deal. Customers rarely miss these. I very, very rarely see any truly personal e-mails get trapped by Sniffer though. Hopefully, they have already fixed the problem. I haven't seen any as of this afternoon. William Van Hefner Network Administrator Vantek Communications, Inc. 555 H Street, Ste. C Eureka, CA 95501 707.476.0833 ph 800-331.4638 fx > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno > Sent: Wednesday, September 21, 2005 9:09 PM > To: sniffer@SortMonster.com > Subject: [sniffer] YAhoo mails failing sniffer? > > > I'm seeing a few legit e-mails from Yahoo failing sniffer. > Anyone else? > > --- > [This E-mail scanned for viruses by Declude Virus] > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] YAhoo mails failing sniffer?
I have noted a few. I think that this has something to do with some Phishing rules that are hitting on content in combination with the Yahoo inserted footer that is advertising donations for Hurricane Katrina. I haven't reported my latest batch of FP's yet, but I will do so now. Matt Marc Catuogno wrote: I'm seeing a few legit e-mails from Yahoo failing sniffer. Anyone else? --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] YAhoo mails failing sniffer?
I got a record number of false-positives from Sniffer yesterday. The category was always "Scam Patterns". Two of them were from Yahoo! as well. Although the total was low (something like four FP's total), that is more in one day than I usually see in a month with Sniffer. There must have been some incredibly-badly written code that slipped though, as they were personal e-mails that should never have been tagged. Personal e-mails are really the only ones that I truly consider false positives. I get dozens of mailing list messages trapped each month, but I don't consider those a big deal. Customers rarely miss these. I very, very rarely see any truly personal e-mails get trapped by Sniffer though. Hopefully, they have already fixed the problem. I haven't seen any as of this afternoon. William Van Hefner Network Administrator Vantek Communications, Inc. 555 H Street, Ste. C Eureka, CA 95501 707.476.0833 ph 800-331.4638 fx > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno > Sent: Wednesday, September 21, 2005 9:09 PM > To: sniffer@SortMonster.com > Subject: [sniffer] YAhoo mails failing sniffer? > > > I'm seeing a few legit e-mails from Yahoo failing sniffer. > Anyone else? > > --- > [This E-mail scanned for viruses by Declude Virus] > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
[sniffer] YAhoo mails failing sniffer?
I'm seeing a few legit e-mails from Yahoo failing sniffer. Anyone else? --- [This E-mail scanned for viruses by Declude Virus] This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html