Re[2]: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread Pete McNeil
On Friday, May 5, 2006, 11:02:00 AM, Darin wrote:

DC Not just drugs, but some others too have been slipping through the past
DC couple of days.  We've reported a little under 40 in the past couple of
DC days.

We saw a bit of a lull, then a rash of new campaigns bunched together
with some new obfuscation techniques. We're getting a handle on it
now. Looks like the burst started about 30 hours ago and is tailing
off now.

Attached image - new arrival rates last 2 days.



getchart.jsp.png
Description: PNG image


Re[2]: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread Pete McNeil
We've had that rule before and had to pull it for false positives.

_M


On Friday, May 5, 2006, 11:41:50 AM, John wrote:

JTL FYI, I created a Declude Filter:

JTL Subject END NOTCONTAINS news
JTL BODY25  CONTAINShttp://geocities.com/

JTL Been catching every one like that.

JTL John T
JTL eServices For You

JTL Seek, and ye shall find!


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
JTL On
 Behalf Of Daniel Bayerdorffer
 Sent: Friday, May 05, 2006 7:38 AM
 To: sniffer@SortMonster.com
 Subject: RE: [sniffer] Lot of Drugs Spam getting through sniffer
 
 Here too.
 
 --
 Daniel Bayerdorffer  [EMAIL PROTECTED]
 Numberall Stamp  Tool Co., Inc.
 PO Box 187 Sangerville, ME 04479 USA
 TEL 207-876-3541  FAX 207-876-3566
 www.numberall.com
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
  Sent: Friday, May 05, 2006 10:34 AM
  To: sniffer@sortmonster.com
  Subject: [sniffer] Lot of Drugs Spam getting through sniffer
 
  The last few days tons on Drus spam is coming in and sniffer
  is catching
  none of it.
 
  Chuck Schick
  Warp 8, Inc.
  (303)-421-5140
  www.warp8.com
 
 
 
  This E-Mail came from the Message Sniffer mailing list. For
  information and (un)subscription instructions go to
  http://www.sortmonster.com/MessageSniffer/Help/Help.html
 
 
 
 
 
 This E-Mail came from the Message Sniffer mailing list. For information
JTL and
 (un)subscription instructions go to
 http://www.sortmonster.com/MessageSniffer/Help/Help.html



JTL This E-Mail came from the Message Sniffer mailing list. For
JTL information and (un)subscription instructions go to
JTL http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: Re[2]: [sniffer] Lot of Drugs Spam getting through sniffer....

2006-05-05 Thread John T (Lists)
Well, I am at the point that I could care less about geocities false
positives. If GeoCities is going to allow this much spam junk then I could
care less about allowing them.

John T
eServices For You

Seek, and ye shall find!


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On
 Behalf Of Pete McNeil
 Sent: Friday, May 05, 2006 9:09 AM
 To: John T (Lists)
 Subject: Re[2]: [sniffer] Lot of Drugs Spam getting through sniffer
 
 We've had that rule before and had to pull it for false positives.
 
 _M
 
 
 On Friday, May 5, 2006, 11:41:50 AM, John wrote:
 
 JTL FYI, I created a Declude Filter:
 
 JTL Subject END NOTCONTAINS news
 JTL BODY25  CONTAINShttp://geocities.com/
 
 JTL Been catching every one like that.
 
 JTL John T
 JTL eServices For You
 
 JTL Seek, and ye shall find!
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 JTL On
  Behalf Of Daniel Bayerdorffer
  Sent: Friday, May 05, 2006 7:38 AM
  To: sniffer@SortMonster.com
  Subject: RE: [sniffer] Lot of Drugs Spam getting through sniffer
 
  Here too.
 
  --
  Daniel Bayerdorffer  [EMAIL PROTECTED]
  Numberall Stamp  Tool Co., Inc.
  PO Box 187 Sangerville, ME 04479 USA
  TEL 207-876-3541  FAX 207-876-3566
  www.numberall.com
 
 
 
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
   Sent: Friday, May 05, 2006 10:34 AM
   To: sniffer@sortmonster.com
   Subject: [sniffer] Lot of Drugs Spam getting through sniffer
  
   The last few days tons on Drus spam is coming in and sniffer
   is catching
   none of it.
  
   Chuck Schick
   Warp 8, Inc.
   (303)-421-5140
   www.warp8.com
  
  
  
   This E-Mail came from the Message Sniffer mailing list. For
   information and (un)subscription instructions go to
   http://www.sortmonster.com/MessageSniffer/Help/Help.html
  
 
 
 
 
  This E-Mail came from the Message Sniffer mailing list. For information
 JTL and
  (un)subscription instructions go to
  http://www.sortmonster.com/MessageSniffer/Help/Help.html
 
 
 
 JTL This E-Mail came from the Message Sniffer mailing list. For
 JTL information and (un)subscription instructions go to
 JTL http://www.sortmonster.com/MessageSniffer/Help/Help.html
 
 
 This E-Mail came from the Message Sniffer mailing list. For information
and
 (un)subscription instructions go to
 http://www.sortmonster.com/MessageSniffer/Help/Help.html



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html