Re: [sniffer] YAhoo mails failing sniffer?

2005-09-21 Thread Matt
I have noted a few.  I think that this has something to do with some 
Phishing rules that are hitting on content in combination with the Yahoo 
inserted footer that is advertising donations for Hurricane Katrina.


I haven't reported my latest batch of FP's yet, but I will do so now.

Matt



Marc Catuogno wrote:


I'm seeing a few legit e-mails from Yahoo failing sniffer.  Anyone else?

---
[This E-mail scanned for viruses by Declude Virus]


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


 



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


RE: [sniffer] YAhoo mails failing sniffer?

2005-09-21 Thread Jay Sudowski - Handy Networks LLC
I noticed some as well.  We received one confirmed fp report, which I
sent in yesterday, but a look at the logs showed potentially up to 5
messages that were sent from legit Yahoo mail servers, that could have
been legit mail that sniffer caught.  Still haven't received a response
on the fp submission either.

Thanks!
-
Jay Sudowski // Handy Networks LLC

Director of Technical Operations
Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003
Hosting Solutions
Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX
www.handynetworks.com

 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of William Van Hefner
Sent: Thursday, September 22, 2005 12:24 AM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] YAhoo mails failing sniffer?

I got a record number of false-positives from Sniffer yesterday. The
category was always Scam Patterns. Two of them were from Yahoo! as
well.
Although the total was low (something like four FP's total), that is
more in
one day than I usually see in a month with Sniffer. There must have been
some incredibly-badly written code that slipped though, as they were
personal e-mails that should never have been tagged. Personal e-mails
are
really the only ones that I truly consider false positives. I get dozens
of
mailing list messages trapped each month, but I don't consider those a
big
deal. Customers rarely miss these. I very, very rarely see any truly
personal e-mails get trapped by Sniffer though. Hopefully, they have
already
fixed the problem. I haven't seen any as of this afternoon.


William Van Hefner
Network Administrator

Vantek Communications, Inc.
555 H Street, Ste. C
Eureka, CA 95501
707.476.0833 ph
800-331.4638 fx 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
 Sent: Wednesday, September 21, 2005 9:09 PM
 To: sniffer@SortMonster.com
 Subject: [sniffer] YAhoo mails failing sniffer?
 
 
 I'm seeing a few legit e-mails from Yahoo failing sniffer.  
 Anyone else?
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 
 This E-Mail came from the Message Sniffer mailing list. For 
 information and (un)subscription instructions go to 
 http://www.sortmonster.com/MessageSniffer/Help/Help.html
 


This E-Mail came from the Message Sniffer mailing list. For information
and (un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


Re: [sniffer] YAhoo mails failing sniffer?

2005-09-21 Thread Matt

Quick follow-up.  The bad rule appears to be 497585.

Matt



Marc Catuogno wrote:


I'm seeing a few legit e-mails from Yahoo failing sniffer.  Anyone else?

---
[This E-mail scanned for viruses by Declude Virus]


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


 



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html