On Saturday, January 8, 2005, 7:47:14 AM, Kirk wrote: KM> I'm still getting a ton of spam that, theoretically, I shouldn't be KM> seeing. Stuff such as "Tadalafil Soft Tabs" ads that are identical to KM> samples I've forwarded to [EMAIL PROTECTED] multiple times in the last KM> week, yet are still passing through mxGuard/Sniffer with a LOW spam KM> probability. I recently upgraded from v2r3 to v2.3.2, could I have missed KM> something in changing over?
I don't think so. To be sure - check for errors in your log file. The campaigns your talking about are very aggressive - which is to say that the sources, uri, and structure of the messages are changed frequently, so they are going to get past filters more frequently than other messages... I believe we are making progress developing some generalized heuristics for these campaigns though... If you have a sample of something that you see as a chronic problem then please attach it as a zip and send it to support@ so I can see if there's something special about it. If you have ideas for broader black rules that you would like added to your rulebase then please let us know... The rules that we add to the core rulebase are designed to avoid false positives on all of the systems we know about... often we can be much more aggressive on an individual basis. Hope this helps, _M This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
