Hello Sniffer Folks, We have quite a spam storm brewing today so I thought I would point it out just in case you were seeing some effects.
So far today we have generated 677 new rules. This is more than twice the nominal rate of the previous 6 days. One interesting characteristic of some of the new spam we are seeing is that old, previously retired domains are being reborn for new campaigns - some of them after as much as a year of silence. We will be operating in a "spam-noc" mode until the storm subsides. This means that resources from other development and support activities may be redirected to maintain constant monitoring and maintenance of the rulebase rather than periodic maintenance which is usually the case. We will return to a normal operations schedule once the rate of new spam normalizes again. Those of you who are triggering your rule-base downloads automatically from our update notifications will see better filtering performance than those that use a scheduler. If you are not triggering your updates from our notification messages then now would be a good time to reconsider putting the appropriate scripting and program alias in place on your server. Remember, we can send your update notifications to any address you wish - just let us know at support@ if you need your update address changed. Another feature you should implement if possible is the use of gzip in your rulebase download scripts. This can reduce the bandwidth required for your download significantly (typically 70% or more!). Here is a link to the mail archive that describes how this can be implemented with wget: http://www.mail-archive.com/[EMAIL PROTECTED]/msg00427.html If you are not familiar with gzip you can find it here: http://www.gzip.org/ Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
