RE: [Declude.JunkMail] OBFUSCATION filter

2003-09-15 Thread Pete - Madscientist
Ahh. Understood. I got confused by our rules where we code for a single instance restricted to the URL. (Can't do that without wildcards). All good then. Great work! _M |-Original Message- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of |Matthew Bramble |Sent: Monday, Se

RE: [Declude.JunkMail] Bogus comments

2003-09-12 Thread Pete - Madscientist
Not quite right. Normal HTML does often contain comments, usually generated automatically as a deubgging aid for the developer. Normal HTML does not usually contain comments that break up words like fr ee (note that I added a space after fr and before ee to be sure Message Sniffer filters wouldn't

RE: [Declude.JunkMail] scrambled url in source of e-mail

2003-09-04 Thread Pete - Madscientist
Title: Message For one thing this is a great way to filter spam. There is no good reason to encode part of a url, or for that matter to encode "normal" characters. So, anything with %30%37.biz is _ALMOST_ certain to be spam. We have been testing a number of rules like this already with great

RE: [Declude.JunkMail] More and more email getting past Declude

2003-09-02 Thread Pete - Madscientist
They're not getting past everything - we show a rejection rate of greater than 75% almost consistently... not to say that the problem isn't getting worse though. http://www.sortmonster.com/MessageSniffer/Performance/FlowRates.jsp We have seen a significant and apparently consistent rise in the ra

RE: [Declude.JunkMail] Alligate

2003-08-29 Thread Pete - Madscientist
John, Our demo policy is now more open than before. I don't want to put too fine a point on it, but as part of our open source release, we changed the way we do demos for Message Sniffer. The sniffer2.snf license has some restrictions but it continually updated. You might consider implementing Mes

RE: [Declude.JunkMail] OT: Declude notification and SoBig assault.

2003-08-22 Thread Pete - Madscientist
Message Sniffer has rules in place for this (about 30+ of them). We've also lifted the delay restriction on the demo license temporarily so that ANYONE can get this protection by running the demo license (sniffer2.snf) with Declude Junkmail. BE SURE TO DOWNLOAD THE LATEST VERSION OF THE RULEBASE -

RE: RE : [Declude.JunkMail] Alligate vs. Message Sniffer...opinions?

2003-08-21 Thread Pete (Madscientist)
Please forward a copy of the newsletter to me ([EMAIL PROTECTED]) as an attachment and I will adjust the rule base (if appropriate). This is a service we provide by default to each subscriber, but we also - in general - code the core rule base to avoid false positives whenever we hear about them an