Re: [sniffer] Declude and Sniffer

2005-07-21 Thread Darin Cox
Horne" <[EMAIL PROTECTED]> To: Sent: Thursday, July 21, 2005 1:12 PM Subject: RE: [sniffer] Declude and Sniffer That helps to tune the overall rulebase, but this tunes MY rulebase to the types of spam that we receive. If I send it to the spam@ address it may or may not get added t

RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Dan Horne
[EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Thursday, July 21, 2005 12:02 PM > To: sniffer@SortMonster.com > Subject: Re: [sniffer] Declude and Sniffer > > I thought we were supposed to just forward these as > attachments to th

Re: [sniffer] Declude and Sniffer

2005-07-21 Thread Darin Cox
I thought we were supposed to just forward these as attachments to the spam@ address? Darin. - Original Message - From: "Dan Horne" <[EMAIL PROTECTED]> To: Sent: Thursday, July 21, 2005 11:49 AM Subject: RE: [sniffer] Declude and Sniffer Get in touch with Pete. They

RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Dan Horne
f Of Kyle Fisher > Sent: Thursday, July 21, 2005 11:40 AM > To: sniffer@SortMonster.com > Subject: RE: [sniffer] Declude and Sniffer > > I have about 6,000 accounts and I delete with sniffer well it > has a weight of 25 with no false positives, but basically > anything caug

RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Kyle Fisher
but doesn't. I would like to set this up. Kyle Fisher -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Thursday, July 21, 2005 9:48 AM To: sniffer@SortMonster.com Subject: RE: [sniffer] Declude and Sniffer I weight sniffer high enou

RE: [sniffer] Declude and Sniffer

2005-07-21 Thread Dan Horne
I weight sniffer high enough to hold the message on its own. We use it as our blacklist and it works great. We get some false positives, but we whitelist those and move on. Our users forward all spam received in their inbox to an email address that the sniffer system checks automatically. It ad

RE: [sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
fer Subject: Re: [sniffer] Declude and Sniffer on 7/20/05 11:06 AM, John Carter wrote: > I have seen and understand the various Core Rule Group Result Codes, > but am not sure how to separate those out for evaluation. In your global.cfg add lines like the sniffer-scams line below test na

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread System Administrator
on 7/20/05 11:06 AM, John Carter wrote: > I have seen and understand the various Core > Rule Group Result Codes, but am not sure how to separate those out for > evaluation. In your global.cfg add lines like the sniffer-scams line below test name - category ---

RE: [sniffer] Declude and Sniffer

2005-07-20 Thread John Carter
evaluation. Am I missing something at the Sortmonster or Declude web sites? Thanks again, John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of System Administrator Sent: Wednesday, July 20, 2005 9:38 AM To: Sniffer Subject: Re: [sniffer] Declude and Sniffer on

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Bonno Bloksma
Hi, > I currently tag subject lines at 10 and delete at 20. Sniffer results are > scored at 9. No two tests currently result in more than 18 and therefore it > takes three failed tests to delete. I tag at 12, hold on 20 and delete on 27. Sniffer is at 19, just 1 under hold. If anything agrees w

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread System Administrator
on 7/20/05 9:44 AM, Jonathan Schoemann wrote: > Question: Do any of you tag subject lines based on Sniffer alone? My main > problem is that some of my users delete based on the tagged subject line. I weight each category in Sniffer differently. Some messages are deleted by Sniffer alone, some m

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Nick Hayer
Hi John, I do not. As you I score some sniffer tests at 9 and tag the subject at 10. I do occasionaly see fp's with sniffer - particulary with legit newsletters. So what I have done is leave sniffer where it is and combo it up with other tests to push it to and over the 10 threshold. -Nick

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Scott Fisher
I subject tag at 100, hold at 200 and delete at 300. My sniffer weights vary from 100 to 125. - Original Message - From: "John Carter" <[EMAIL PROTECTED]> To: Sent: Wednesday, July 20, 2005 8:16 AM Subject: [sniffer] Declude and Sniffer To other Declude users with Sniffer: I cur

Re: [sniffer] Declude and Sniffer

2005-07-20 Thread Jonathan Schoemann
Iset up declude to delete if it fails sniffer. >>> [EMAIL PROTECTED] 07/20/05 09:16AM >>> To other Declude users with Sniffer: I currently tag subject lines at 10 and delete at 20. Sniffer results are scored at 9. No two tests currently result in more than 18 and therefore it takes three failed