> 3) then be able to create a temporary rule to help block messages > - must be viable until SNF has an updated ruleset to start clearing out > the attack > - I don't think declude (what I use w/SNF) has rule expirations (but > would be a nice feature)
What I do when I create a temp rule is to call it T_date_A and then B and then C and so forth. I then keep a rule_readme.txt file in the spool\declude directory that I update. John T ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
