Re: [sniffer] Today
I think Sniffer is finding the bulk of the new spam's here. For people like me that require two or more test hits to get to a hold weight, the other DNSBL tests are definitely lagging. - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Jorge Asch [EMAIL PROTECTED] Sent: Tuesday, September 21, 2004 7:58 PM Subject: Re: [sniffer] Today On Tuesday, September 21, 2004, 6:13:23 PM, Jorge wrote: JA Something happened today? I've had a couple of quiet days lately, today JA I've received over 40+ message of spam that went undetected by JA MessageSniffer... Spam storm - We've been pounding new rules for about two days. We're still at it. A good place to look is always here: http://www.sortmonster.com/MessageSniffer/Performance/ChangeRates.jsp Days Ago Adjustments --- 01118 11147 2777 3810 Today so far (not over yet) 1118 new rules. That's nearly one new rule per minute all day long! (53.23 secs/rule). Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] sniffer issue
On Wednesday, September 22, 2004, 10:06:29 AM, Faustino wrote: FB Hi there, FB We're having a problem with somes of our clients and Sniffer. FB For example: All the messages to a specific domain are marked FB as spam, even if the text message only contains 'Test'. FB Sniffer return the code 52. FB Should be the domain name? FB Is there any way to fix this issue? This is a rulebase panic situation. We need to identify the rule and correct it. Your log file should indicate the rule ID. If you can find that then you can enter it in your sniffer config file to stop the problem immediately by temporarily blocking the rule at your sniffer engine. Then you should submit a false positive to us, include the rule ID if you know it, and we will adjust the rulebase. Here is a link to the rulebase panic procedure on our web site: http://www.sortmonster.com/MessageSniffer/Help/FAQ.html#FP FB I have been sending this email to [EMAIL PROTECTED] but I didn't receive any answer. Hmm... I don't see the messages. I'll look into it. _M FB Regards, FB fausto. FB This E-Mail came from the Message Sniffer mailing list. For FB information and (un)subscription instructions go to FB http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
Re: [sniffer] sniffer issue
Hi there, Thanks a lot for your message. The rule that is causing the problem is : 40102. qdq1414z 20040915192710 fileuJgh6T 20 0 Match 40102 52 142 156 53 qdq1414z 20040915192710 fileuJgh6T 20 0 Final 40102 52 0 1220 53 I stopped the problem by blocking the rule 40102 in the cfg When can I unblock the rule? Yes, I sent two emails to [EMAIL PROTECTED]before this one. Regards, fausto. This is a rulebase panic situation. We need to identify the rule and correct it. Your log file should indicate the rule ID. If you can find that then you can enter it in your sniffer config file to stop the problem immediately by temporarily blocking the rule at your sniffer engine. Then you should submit a false positive to us, include the rule ID if you know it, and we will adjust the rulebase. Here is a link to the rulebase panic procedure on our web site: http://www.sortmonster.com/MessageSniffer/Help/FAQ.html#FP FB I have been sending this email to [EMAIL PROTECTED] but I didn't receive any answer. Hmm... I don't see the messages. I'll look into it. _M FB Regards, FB fausto. FB This E-Mail came from the Message Sniffer mailing list. For FB information and (un)subscription instructions go to FB http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
