[sniffer] Re: Significant increase in false positives

[Matrosity Hosting]

Here's something I found in our log:   10:16 00:14 SMTP-(f6cb00f30000e742) 451 VS5-MF Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.4.5) [EMAIL PROTECTED] Bill Foresman Matrosity Hosting www.matrosity.com 850.656.2644   From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Hosting Sent: Monday, October 16, 2006 6:17 PM To: Message Sniffer Community Subject: [sniffer] Re: Significant increase in false positives Anyone having issues getting email to Yahoo today?   Thanks, Bill Foresman Matrosity Hosting www.matrosity.com 850.656.2644   From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Monday, October 16, 2006 6:15 PM To: Message Sniffer Community Subject: [sniffer] Re: Significant increase in false positives For us, it doesn't calculate the proper weight when this happens, and only acts on the weight seen in the topmost headers.  One of these years I'll finally exercise the right to use our 4.x license, I just don't have time for new problems at this point. Darin.     ----- Original Message ----- From: Robert Grosshandler To: Message Sniffer Community Sent: Monday, October 16, 2006 5:57 PM Subject: [sniffer] Re: Significant increase in false positives That's been a problem for a long time, but for us, it still treats that e-mail as spam, with the appropriate weight.  100% of the time if Declude does that, the e-mail is beyond our delete weight.   Rob From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Herb Guenther Sent: Monday, October 16, 2006 4:35 PM To: Message Sniffer Community Subject: [sniffer] Re: Significant increase in false positives Hi Darin; Not seeing a lot of false pos messages, but there are lots of spam messages sneaking through our system because  declude is not modifying the header correctly.  It is adding a header stub to the bottom of the message so that users mail client filters which look for the modified subject line is not working.  Anyone else having that issue? Herb Darin Cox wrote: Anyone else seeing a sudden increase in FPs?  We normally report a few each day, but we're seeing a 10x increase in FPs for the past three days. Darin.     -- Herb Guenther Lanex, LLC www.lanex.com (262)789-0966x102 Office (262)780-0424 Direct This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way.