Re[2]: [sniffer] Search engine work in progress

2004-06-13 Thread Pete McNeil
On Saturday, June 12, 2004, 10:32:53 PM, Karen wrote: KP> Hey :) KP> I played with this a little bit. . .a few things I noticed. KP> * what's with all the content scanner titles that seem to be KP> repeats. . . (ie. type in Vopmail. . .look at #8 it says KP> SortMonster - Message Sniffer

[sniffer] Experimental hits on bounce messages

2004-06-13 Thread Matt
Pete, I've been seeing a good deal of Experimental hits on bounce messages, primarily with the Nazi spam that has been forging recipients, but I've seen these on other messages that seemingly don't have any spam content, though most of course do involve spam. I was wondering if this is due to I

Re: [sniffer] Experimental hits on bounce messages

2004-06-13 Thread Pete McNeil
On Sunday, June 13, 2004, 11:49:21 PM, Matt wrote: M> Pete, M> I've been seeing a good deal of Experimental hits on bounce messages, M> primarily with the Nazi spam that has been forging recipients, but I've M> seen these on other messages that seemingly don't have any spam content, M> though mos

Re: [sniffer] Experimental hits on bounce messages

2004-06-13 Thread Matt
Pete, So would the Message-ID produce a hit if it was in the body of a message? The reason why I ask is because I'm concerned about the possibility of legitimate servers getting tagged with Experimental and how that plays into my system. Am I also to assume that you have some protections in pl

Re[2]: [sniffer] Experimental hits on bounce messages

2004-06-13 Thread Pete McNeil
On Monday, June 14, 2004, 12:33:24 AM, Matt wrote: M> Pete, M> So would the Message-ID produce a hit if it was in the body of a M> message? The reason why I ask is because I'm concerned about the M> possibility of legitimate servers getting tagged with Experimental and M> how that plays into m

Re: [sniffer] Experimental hits on bounce messages

2004-06-13 Thread Matt
Pete, I've seen a moderate number of these bounces in the last few days tagged by Experimental that didn't have any obvious indications of spam.  You are of course correct that a majority of bounces are the result of viruses or Joe-Jobs.  Fortunately the Joe-Jobs are mostly returned to non-exi