RE: [Declude.JunkMail] Sniffer Bitmasks Suggestion?

[Andy Schmidt]

Title: Message

Matt/Pete:   I may not have understood your specific problem.  But it's no clear in my mind, what this would gain.   Here is my sniffer configuration.  It already allows me to score each result code that it returns?   SNIFFER  external  nonzero "sniffer.exe licensecode" 6 0   SNIFFER-SNAKE external  052 "sniffer.exe licensecode" 1 0 SNIFFER-SCAMS  external  053 "sniffer.exe licensecode" 2 0 SNIFFER-PORN external  054 "sniffer.exe licensecode" 2 0 SNIFFER-MALWARE external  055 "sniffer.exe licensecode" 3 0 SNIFFER-IP  external  060 "sniffer.exe licensecode" -2 0 SNIFFER-OBFUSC  external  061 "sniffer.exe licensecode" 2 0 SNIFFER-HEUR  external  062 "sniffer.exe licensecode" 1 0   I can't see what difference it makes whether the syntax is "external 052" or "bitmask 1" - it seems like it would be one-to-one relationship from sniffer return code to bitmask? Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone:  +1 201 934-3414 x20 (Business) Fax:    +1 201 934-9206 http://www.HM-Software.com/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, November 05, 2004 07:35 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] ANN: SPAMC32 (SpamAssassin SPAMC for Declude) 0.5.57 released If you don't mind me expanding on the bitmask idea....Sniffer users would benefit from this greatly as many spams fail multiple Sniffer tests.  This would allow us to score each result code that it returned, i.e.     SNIFFER-GENERAL               bitmask    1    "C:\IMail\Declude\Sniffer\execode.exe mycode"    6    0     SNIFFER-EXPERIMENTAL    bitmask    2    "C:\IMail\Declude\Sniffer\execode.exe mycode"    6    0     SNIFFER-OBFUSCATION      bitmask    4    "C:\IMail\Declude\Sniffer\execode.exe mycode"    6    0     SNIFFER-IP                              bitmask    8    "C:\IMail\Declude\Sniffer\execode.exe mycode"    4    0     SNIFFER-CASINO                   bitmask    16    "C:\IMail\Declude\Snifferexecode.exe mycode"    8    0     ... So if a test such as Sniffer returned a result code of 26, that would mean it hit SNIFFER-CASINO, SNIFFER-IP and SNIFFER-EXPERIMENTAL. That would be huge :) Matt