After talking to several people that have gotten false postitives when trying to send us email, it seems that there may be a problem with RATWR7a_MESSID. I think that this rule may be triggering on mail sent by Outlook Express, though I could not tell you what version or what set of patches have been applied to these computers.
Has anyone noticed the same thing or is this just my imagination? Tim Donahue
