To other Declude users with Sniffer:
I currently tag subject lines at 10 and delete at 20. Sniffer results are
scored at 9. No two tests currently result in more than 18 and therefore it
takes three failed tests to delete.
I am considering moving Sniffer to 10. This would tag the subjects
Iset up declude to delete if it fails sniffer.
[EMAIL PROTECTED] 07/20/05 09:16AM
To other Declude users with Sniffer:
I currently tag subject lines at 10 and delete at 20. Sniffer results are
scored at 9. No two tests currently result in more than 18 and therefore it
takes three failed
Hi John,
I do not.
As you I score some sniffer tests at 9 and tag the subject at 10. I do
occasionaly see fp's with sniffer - particulary with legit newsletters.
So what I have done is leave sniffer where it is and combo it up with
other tests to push it to and over the 10 threshold.
-Nick
on 7/20/05 9:44 AM, Jonathan Schoemann wrote:
Question: Do any of you tag subject lines based on Sniffer alone? My main
problem is that some of my users delete based on the tagged subject line.
I weight each category in Sniffer differently. Some messages are deleted by
Sniffer alone, some
Hi,
I currently tag subject lines at 10 and delete at 20. Sniffer results are
scored at 9. No two tests currently result in more than 18 and therefore
it
takes three failed tests to delete.
I tag at 12, hold on 20 and delete on 27.
Sniffer is at 19, just 1 under hold.
If anything agrees
Thanks to everyone (and any to follow later). This has been helpful.
Jonathan, could you give me at least one example of coding Declude for a
particular Sniffer category? I have seen and understand the various Core
Rule Group Result Codes, but am not sure how to separate those out for
on 7/20/05 11:06 AM, John Carter wrote:
I have seen and understand the various Core
Rule Group Result Codes, but am not sure how to separate those out for
evaluation.
In your global.cfg add lines like the sniffer-scams line below
test name - category
Thanks, that helps a lot. Didn't understand the replace nonzero with the
weight number in the Global file.
John
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of System Administrator
Sent: Wednesday, July 20, 2005 10:27 AM
To: Sniffer
Subject: Re:
On Wednesday, July 20, 2005, 12:05:29 PM, John wrote:
JC Thanks, that helps a lot. Didn't understand the replace nonzero with the
JC weight number in the Global file.
Minor correction...
Actually -- you replace nonzero with the result code.
You adjust the weights at the end of the line as
My bad. Trying to multi-task isn't working today. :-)
John
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Wednesday, July 20, 2005 11:13 AM
To: John Carter
Subject: Re[2]: [sniffer] Declude and Sniffer
On Wednesday, July 20, 2005,
10 matches
Mail list logo