This message was originally HTML formatted. View in a HTML capable client to see the original version.\r\n\r\n David Thank you for your reply. Once I read it I realized this is what I set up years ago using different test names. I thought that perhaps you'd developed a means of sending it directly to ARM.
John ---- Original Message ---- From: "David Barker" david.bar...@mailsbestfriend.com Sent: 11/7/2014 10:03:17 AM To: community@mailsbestfriend.com Subject: [MBF] Re: Sniffer Feedback The NOHIT test is used to determine which tests did NOT trigger. The main purpose of this implementation was to create a feedback system to Message Sniffer ARM research to improve spam catch rates on new spam. The new test syntax below and is located in the global.cfg: TEST-NAME1 NOHIT TEST-NAME2 WEIGHT 0 0 TEST-NAME1 Your given name of the test NOHIT Test Type TEST-NAME2 The name of the test you are tracking that did NOT trigger WEIGHT The weight = when you would like this test to trigger Example of use (This test will trigger if SNIFFER is NOT triggered for emails over 30 points): SNF-FEEDBACK NOHIT SNIFFER 30 0 0 Using this test we can identify messages that scored more than 30 points and did NOT trigger sniffer. We then use either a COPYTO or ROUTETO Action in the $default$.junkmail file to have these messages go to a specific inbox where ARM research periodically retrieves these messages and writes new rules to distribute to other Message Sniffer users. The entry in the $default$.junkmail would be: SNF-FEEDBACK ROUTETO x...@example.com Where xxxx is your license key for Message Sniffer. Be sure to setup an email user with x...@example.com on your server and provide ARM research supp...@armresearch.com with the POP account details to access the account to retrieve messages. On 11/6/2014 6:14 PM, John Doyle wrote: I noticed a line in the MBF global config file that I'd not seen before. SNF-FEEDBACKNOHITSNIFFER3000 I've set up some filters to forward to an account that Sniffer POP's into and pulls copied mail from that sniffer did not catch and we flagged as spam with a weight of 18 or greater Does the SNF-FEEDBACK above do the same thing? I've not seen any documentation on it and would like to use it and abandon my home brew system Can anyone provide some information on it's use and configuration thanks John ############################################################# This message is sent to you because you are subscribed to the mailing list community@mailsbestfriend.com. To unsubscribe, E-mail to: community-...@mailsbestfriend.com To switch to the DIGEST mode, E-mail to community-dig...@mailsbestfriend.com To switch to the INDEX mode, E-mail to community-in...@mailsbestfriend.com Send administrative queries to community-requ...@mailsbestfriend.com -- David BarkerMails Best FriendEmail : david.barker@mailsbestfriend.comWeb : www.mailsbestfriend.comOffice : 866.919.2075Mobile : 978.518.6461
