Hello Serge,

Tuesday, December 12, 2006, 2:22:27 PM, you wrote:

> We started using tests for the different sniffer categories recently and are
> finding that snifferwhitelist is very innacurate
> ot is substracting wheight from more real spam than it does of non-spam
> messages
> should we just drop it ? what are you guys doing about this ?

Note that in the default rulebase setup, there is no such thing
(really) as a sniffer whitelist rule group. We do have some (very few
highly secret) global white rules - but they are coded to produce a
zero result.

You should consider a zero result NOT to indicate a whitelist hit, but
rather the absence of a black-rule hit.

On some systems that have customized rulebases, local white rules
_may_ be coded to a special result code so they can be extracted from
the results, but this is not usually the case.

Hope this helps,

Thanks,

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to