RE: [sniffer] Surprising missed spam
To which addresss should I send these? Also, I mis-stated the spam. They were not plain text, but html, but clearly have many classic spam attributes. I will send them along, but need to know where. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, September 13, 2004 4:29 PM To: Agid, Corby Subject: Re: [sniffer] Surprising missed spam On Monday, September 13, 2004, 7:22:03 PM, Corby wrote: AC Hello, AC I was surprised recently by some spam that got through without AC getting caught by the sniffer. We've been getting some plain text AC messages that have obvious spam words in the subject line. For AC example, a plain text message with horny teenagers AC came through. The content was also very spammy, but all plain text. AC I tried sending myself a few messages with standard spam phrases and AC none of them tripped any sniffer rules. AC Am I missing something? Can you zip up some examples and send them to me? I'm researching this issue right now and I need more data. Thanks, _M PS: A number of word / phrase based rules have been dropped from the core rule base due to false positives - not many, but this might explain some of what you're seeing - I will know more when I have some examples. If that's the case I can always put the rules back in for your local rule base. This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
RE: [sniffer] Surprising missed spam
I suppose everyone's userbases have differenent requirements. An ISP or private enterprisemight worry about false postives on "horny teenagers" and "penis enlargement", but for our local government agency, it causes problems. Corby From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Monday, September 13, 2004 5:25 PMTo: [EMAIL PROTECTED]Subject: Re: [sniffer] Surprising missed spam Corby,Personally, I'm a fan of leaving the generic stuff out due to the potential of false positives. Those of us that are using Sniffer in addition to other spam blocking mechanisms can afford to lose some Sniffer hits on such phrases because they will be picked up by other means almost all of the time. Including such phrases however would increase our false positive rate without a measurable benefit in spam capture rates. I have even asked Pete to remove some phrase hits from my own rulebase for exactly this reason.MattAgid, Corby wrote: Hello, I was surprised recently by some spam that got through without getting caught by the sniffer. We've been getting some plain text messages that have obvious spam words in the subject line. For example, a plain text message with "horny teenagers" came through. The content was also very spammy, but all plain text. I tried sending myself a few messages with standard spam phrases and none of them tripped any sniffer rules. Am I missing something? Corby -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
[sniffer] Surprising missed spam
Title: Surprising missed spam Hello, I was surprised recently by some spam that got through without getting caught by the sniffer. We've been getting some plain text messages that have obvious spam words in the subject line. For example, a plain text message with horny teenagers came through. The content was also very spammy, but all plain text. I tried sending myself a few messages with standard spam phrases and none of them tripped any sniffer rules. Am I missing something? Corby
