RE: [sniffer] Declude Question

2005-05-26 Thread Colbeck, Andrew
PM> Spam volumes in general are up quite a bit since the german sober
PM> incident. In the past few days there have been a few new campaigns
PM> that have had a very aggressive delivery schedule

For what it's worth, I'm seeing this more today, and in particular, from
a wide number of IPs, instead of a high number of messages from a few
IPs.
I haven't investigated for content.

Andrew 8)


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


Re: [sniffer] Declude Question

2005-05-25 Thread Pete McNeil
On Wednesday, May 25, 2005, 9:11:17 AM, Computer wrote:

CHS> Dear Pete,

CHS> In the past few days, it seems the amount of spam getting through has
CHS> increased quite a bit.  I am wondering if it is necessary to upgrade to the
CHS> latest version of the Declude software.  Do you think this would make a
CHS> difference?

Spam volumes in general are up quite a bit since the german sober
incident. In the past few days there have been a few new campaigns
that have had a very aggressive delivery schedule -- in particular our
PharmacyByMail SHOP friends have been driving a polymorphic campaign
using a new obfuscation technique that they seem to like quite a bit.
I created a new set of adaptive rules for this campaign this morning
(a few hours ago) and so we should be making a big dent in that one.

Right now the new-spam rates are high (I'm watching the inbound
queues) so I'm sure the spammers are still at it in a big way. (We're
on it.)

The latest version of Declude may help a bit if you can leverage new
features - but the the prior versions are quite effective. You may
consider revisiting your configuration and adjusting your weights.
Take a look through the spam that is getting through and determine
what is or is not catching it in Declude then adjust accordingly.

Be sure to submit spam that does get through of course.

Hope this helps,

_M





This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


[sniffer] Declude Question

2005-05-25 Thread Computer House Support
Dear Pete,

In the past few days, it seems the amount of spam getting through has 
increased quite a bit.  I am wondering if it is necessary to upgrade to the 
latest version of the Declude software.  Do you think this would make a 
difference?


Thank you,

Michael Stein
Computer House
[EMAIL PROTECTED]

www.computerhouse.com


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html