Re: [sniffer] Declude configuration

[Scott Fisher]

Here's what I use:

My subject tag weight is 100 points. So in general sniffer weighs in at 90%. The 
greymail (60) needs some taming. I run a greymail whitelist to credit back 42 points 
to those that I don't consider spam. That's the only code you really need to be wary 
of. You may tend to get a few more false positives in the experimental (62) category, 
so if you wanted to weight that one less. On the other hand it is likely to catch the 
newest spam.

I find having return code 0 helps. When I encounter a spam that has the 
sniffer-notfound in the headers, it gets forwarded to sortmonster.


SNIFFER-NOTFOUNDexternal 000 D:\IMail\Declude\Sniffer\sniffer2.exe code 0 0
SNIFFER-TRAVEL  external 047 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-INSURANCE   external 048 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-AV-PUSH external 049 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-WAREZ   external 050 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-SPAMWAREexternal 051 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-SNAKEOILexternal 052 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-SCAMS   external 053 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-PORNexternal 054 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-MALWARE external 055 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-ADVERTISING external 056 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-SCHEMES external 057 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-CREDIT  external 058 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-GAMBLINGexternal 059 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-GREYMAILexternal 060 D:\IMail\Declude\Sniffer\sniffer2.exe code 42 0
SNIFFER-OBFUSCATION external 061 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-EXPERIMENTALexternal 062 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0
SNIFFER-GENERAL external 063 D:\IMail\Declude\Sniffer\sniffer2.exe code 90 0

Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 06/14/04 11:14AM 
I am new to Sniffer, and have it up and running with the basic line looking
for a nonzero return code.

I would now like to start setting different weights for different return
codes.

Does some one have a example configuration I can use?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You




This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html


This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html

RE: [sniffer] Declude configuration

[Landry William]

Here is a sample of what I use:
=
SNIFFER-TRAVEL  external 047
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   05  0
SNIFFER-INSURANCE   external 048
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   10  0
SNIFFER-AV-PUSH external 049
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   07  0
SNIFFER-WAREZ   external 050
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   10  0
SNIFFER-SPAMWAREexternal 051
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   10  0
SNIFFER-SNAKEOILexternal 052
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   12  0
SNIFFER-SCAMS   external 053
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   12  0
SNIFFER-PORNexternal 054
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   15  0
SNIFFER-MALWARE external 055
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   12  0
SNIFFER-ADVERTISING external 056
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   10  0
SNIFFER-SCHEMES external 057
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   12  0
SNIFFER-CREDIT  external 058
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   07  0
SNIFFER-GAMBLINGexternal 059
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   07  0
SNIFFER-GREYMAILexternal 060
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   05  0
SNIFFER-OBFUSCATION external 061
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   12  0
SNIFFER-EXPERIMENTALexternal 062
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   07  0
SNIFFER-GENERAL external 063
M:\IMail\Declude\TPA\Sniffer\YourLicenseID.exe YourAuthCode   10  0
=

Bill

-Original Message-
From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 14, 2004 9:15 AM
To: [EMAIL PROTECTED]
Subject: [sniffer] Declude configuration


I am new to Sniffer, and have it up and running with the basic line looking
for a nonzero return code.

I would now like to start setting different weights for different return
codes.

Does some one have a example configuration I can use?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You




This E-Mail came from the Message Sniffer mailing list. For information and
(un)subscription instructions go to
http://www.sortmonster.com/MessageSniffer/Help/Help.html

---
This message and any included attachments are from Siemens Medical Solutions 
USA, Inc. and are intended only for the addressee(s).  
The information contained herein may include trade secrets or privileged or 
otherwise confidential information.  Unauthorized review, forwarding, printing, 
copying, distributing, or using such information is strictly prohibited and may 
be unlawful.  If you received this message in error, or have reason to believe 
you are not authorized to receive it, please promptly delete this message and 
notify the sender by e-mail with a copy to [EMAIL PROTECTED] 

Thank you

This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html