RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Dan Horne
, 2005 9:16 AM To: sniffer@sortmonster.com Subject: [sniffer] Declude and Sniffer To other Declude users with Sniffer: I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three

RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Dan Horne
Sent: Thursday, July 21, 2005 11:40 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Declude and Sniffer I have about 6,000 accounts and I delete with sniffer well it has a weight of 25 with no false positives, but basically anything caught by sniffer gets deleted. I delete at 10

Re[2]: [sniffer] Declude and Sniffer

2005-07-21 Thread Pete McNeil
On Thursday, July 21, 2005, 12:01:32 PM, Darin wrote: DC I thought we were supposed to just forward these as attachments to the spam@ DC address? We're trying to move away from that :-) poping the messages is more scalable. _M This E-Mail came from the Message Sniffer mailing list. For

Re[2]: [sniffer] Declude and Sniffer

2005-07-21 Thread Pete McNeil
On Thursday, July 21, 2005, 1:12:18 PM, Dan wrote: DH That helps to tune the overall rulebase, but this tunes MY rulebase to DH the types of spam that we receive. If I send it to the spam@ address it DH may or may not get added to the rulebase. Done this way, I KNOW it is DH going to be added

Re[4]: [sniffer] Declude and Sniffer

2005-07-21 Thread Pete McNeil
@SortMonster.com DC Sent: Thursday, July 21, 2005 1:44 PM DC Subject: Re[2]: [sniffer] Declude and Sniffer DC On Thursday, July 21, 2005, 12:01:32 PM, Darin wrote: DC I thought we were supposed to just forward these as attachments to the DC spam@ DC address? DC We're trying to move away from

[sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
To other Declude users with Sniffer: I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three failed tests to delete. I am considering moving Sniffer to 10. This would tag the subjects

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Jonathan Schoemann
Iset up declude to delete if it fails sniffer. [EMAIL PROTECTED] 07/20/05 09:16AM To other Declude users with Sniffer: I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three failed

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Nick Hayer
John Carter wrote: To other Declude users with Sniffer: I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three failed tests to delete. I am considering moving Sniffer to 10. This would

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread System Administrator
on 7/20/05 9:44 AM, Jonathan Schoemann wrote: Question: Do any of you tag subject lines based on Sniffer alone? My main problem is that some of my users delete based on the tagged subject line. I weight each category in Sniffer differently. Some messages are deleted by Sniffer alone, some

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Bonno Bloksma
Hi, I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three failed tests to delete. I tag at 12, hold on 20 and delete on 27. Sniffer is at 19, just 1 under hold. If anything agrees

RE: [sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
Thanks to everyone (and any to follow later). This has been helpful. Jonathan, could you give me at least one example of coding Declude for a particular Sniffer category? I have seen and understand the various Core Rule Group Result Codes, but am not sure how to separate those out

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread System Administrator
on 7/20/05 11:06 AM, John Carter wrote: I have seen and understand the various Core Rule Group Result Codes, but am not sure how to separate those out for evaluation. In your global.cfg add lines like the sniffer-scams line below test name - category

RE: [sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
: [sniffer] Declude and Sniffer on 7/20/05 11:06 AM, John Carter wrote: I have seen and understand the various Core Rule Group Result Codes, but am not sure how to separate those out for evaluation. In your global.cfg add lines like the sniffer-scams line below test name - category

Re[2]: [sniffer] Declude and Sniffer

2005-07-20 Thread Pete McNeil
On Wednesday, July 20, 2005, 12:05:29 PM, John wrote: JC Thanks, that helps a lot. Didn't understand the replace nonzero with the JC weight number in the Global file. Minor correction... Actually -- you replace nonzero with the result code. You adjust the weights at the end of the line as

RE: Re[2]: [sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
My bad. Trying to multi-task isn't working today. :-) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Wednesday, July 20, 2005 11:13 AM To: John Carter Subject: Re[2]: [sniffer] Declude and Sniffer On Wednesday, July 20, 2005