[sniffer] Rules for Large International ISPs

2006-12-28 Thread Andy Schmidt
Hi, This morning I had to file to false positive reports because emails from Wanadoo.FR and UOL.COM.BR were triggering SNIFFER-IP. I don't know if this is a coincidence or if this is a worrisome new trend caused by someone new in this field how is now coding Sniffer rules without even a basic

[sniffer] Re: Rules for Large International ISPs

2006-12-28 Thread Pete McNeil
Hello Andy, Thursday, December 28, 2006, 10:34:15 AM, you wrote: Hi, This morning I had to file to false positive reports because emails from Wanadoo.FR and UOL.COM.BR were triggering SNIFFER-IP. I don't know if this is a coincidence or if this is a worrisome new trend snip/ Our IP rule

[sniffer] Re: Rules for Large International ISPs

2006-12-28 Thread Andy Schmidt
Hi Pete, Thanks. Let me apologize for the accusatory tone of my message. Someone pointed out to me that my annoyance made me cross the line of being offensive. I would suggest to add some intelligence to the bot F001, where it compares implicated address ranges against a table of excepted IPs,

[sniffer] Re: Rules for Large International ISPs

2006-12-28 Thread Dave Koontz
Well, I guess I will ruffle someones feathers again with my response here, but like your oringial message, I think we need to be honest here. This is not a message sniffer 'popularity' contest after all, we are paying customers and need to ensure SNF causes no False Postives. Over the last few

[sniffer] Re: Rules for Large International ISPs

2006-12-28 Thread Pete McNeil
Hello Andy, Thursday, December 28, 2006, 3:16:57 PM, you wrote: snip/ need to ensure SNF causes no False Positives I agree here. While I can excuse the occasional accidental FP - there should NOT be the mindset that customers just have to live with the fact that the IP rules WILL always