I too have had to submit a lot more false positives lately. I also second
that false positive processing seems to be a lot slower than previously.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
mxGuard, And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
Scott Fisher writes:
I don't know if I would call it a rash, but over the last week, I've submitted
about 30 false positives. That's far more than average.
I've developed a feeling that Message Sniffer has become "too tight".
----- Original Message -----
From: Darin Cox
To: [email protected]
Sent: Tuesday, November 08, 2005 8:54 AM
Subject: Re: [sniffer] Rash of false positives
We're seeing a continual stream of false positives. It's taking all of our time just to keep up with it at the moment. If something isn't done soon, we're going to have to disable sniffer.
Darin.
----- Original Message -----
From: Computer House Support
To: [email protected]
Sent: Tuesday, November 08, 2005 9:34 AM
Subject: Re: [sniffer] Rash of false positives
Dear Darin,
Thanks for the heads up. It's going to take me about 45 minutes to check the 9000 messages that were blocked by Sniffer last night, but I'll let you know if we experienced the same thing.
Michael Stein
Computer House
www.computerhouse.com
----- Original Message -----
From: Darin Cox
To: [email protected]
Sent: Tuesday, November 08, 2005 8:45 AM
Subject: [sniffer] Rash of false positives
Hi Pete,
What's going on over there? We had somewhere between 5 and 10 times the usual number of Sniffer false positives this morning. They are across the board, so it's not just one rule that's catching them, or a particular set of senders or receivers.
Hopefully you can get it under control soon.
It would also be extremely helpful if you could speed up the false positive processing. Lately it seems to take 2-4 days for the rules to be adjusted, which usually means more of the same are caught and submitted over that time. I believe speeding up that process would result in fewer to process all around.
Thanks,
Darin.
This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html
