RE: [sniffer] Sniffer, MDLP, and invURIBL?

[Colbeck, Andrew]

Joe,   Are you using MDLP to autotune your weights in Declude?  If so, you can exclude invURIBL and other tests which you don't want to change, whether because you think the weight is perfect, or because their randomness doesn't fit MDLP's idea of a weighting system.   Check out this snippet from The McNeil on this list at some point in the past:   "Use the #MDLP:MANUAL feature to lock these tests at the values you set. In your GLOBAL.CFG file create a line that lists the tests you want to adjust manually. #MDLP:MANUAL TEST1 TEST2 TEST3 You can also use more than one line if you wish... #MDLP:MANUAL TEST1 ... #MDLP:MANUAL TEST2 ... #MDLP:MANUAL TEST3 ... The #MDLP:MANUAL directive appears to be a comment to Declude so it will be otherwise ignored. If you have an #MDLP directive you want to comment out then you can add an additional # as in: ##MDLP:... This will cause MDLP to ignore it as well."   Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf Sent: Saturday, February 25, 2006 9:05 AM To: sniffer@SortMonster.com Subject: [sniffer] Sniffer, MDLP, and invURIBL? I'm currently running Sniffer via Declude and use MDLP.  Great!   Since all the talk about invURIBL on the Imail list I thought I'd give it a try.  The only problem I have is that it doesn't seem to be compatible with MDLP.   invURIBL assigns its own weight to each message.  The global.cfg line is as follows: INV-URIBL external weight "X:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP%" 0 0 I'm not an expert but the %WEIGHT% must pass the weight determined by invURIBL to Declude.  I don't know what the variables of the weighting system are.   I'm worried that I may start getting a bunch of false positives since MDLP can't manage the weighting of invURIBL.   Would appreciate any advice from anyone that knows more about this than I do!   Thanks, Joe