At 08:51 AM 1/8/2005 -0500, Pete McNeil wrote: >On Saturday, January 8, 2005, 7:47:14 AM, Kirk wrote: > >KM> I'm still getting a ton of spam that, theoretically, I shouldn't be >KM> seeing. Stuff such as "Tadalafil Soft Tabs" ads that are identical to >KM> samples I've forwarded to [EMAIL PROTECTED] multiple times in the last >KM> week, yet are still passing through mxGuard/Sniffer with a LOW spam >KM> probability. I recently upgraded from v2r3 to v2.3.2, could I have missed >KM> something in changing over? > >I don't think so. >To be sure - check for errors in your log file.
I've spot-checked a number of log files and found no errors. >The campaigns your talking about are very aggressive - which is to say >that the sources, uri, and structure of the messages are changed >frequently, so they are going to get past filters more frequently than >other messages... I believe we are making progress developing some >generalized heuristics for these campaigns though... > >If you have a sample of something that you see as a chronic problem >then please attach it as a zip and send it to support@ so I can see if >there's something special about it. I've gone through some and haven't found any commonality by sender, etc, but it seems that some are getting through that I'd have expected to get triggered on the subject line alone. For example: Tadalafil Soft Tabs - Great results! ready for the sex life you dreamed about? Buy medications from the net .Pay 1/2 the price of anywhere else Need your prescripiton? We have them VIAGRA $2.99Ljk5 CARTIER, PIAGET, ROLEX Replicas - Expensive Look, Not Expensive Price I've sent numerous examples of each of these in the last week or so yet messages with identical subject lines are still getting through classed as LOW or CLEAN. This just doesn't seem to match the performance that I've become accustomed to, which is why I started questioning whether or not I may have messed up something at my end. -- Kirk Mitchell-General Manager [EMAIL PROTECTED] Keystone Connect Unlock Your World Altoona, PA 814-941-5000 http://www.keyconn.net This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
