[sniffer] multipart without boundary

2004-09-20 Thread Roger Moser
Since the content-type multipart must specify a boundary, I suggest you filter all mail that have the content type multipart without boundary=. Currently PARMACIA.BIZ sends hundreds of spams daily to our domain and probably to others also. All of them say: Content-Type: multipart/mixed;

[sniffer] Declude setup for different result codes

2004-09-20 Thread Dan Spangenberg
Can you direct me to a howto to setup declude to weight differently for different result codes? Currently I have only one weight for sniffer and am holding on it. I do find a few false positives. My mail volume is pretty low - 5,000-10,000 a day or so. I read that you were recommending possibly a

Re: [sniffer] multipart without boundary

2004-09-20 Thread Pete McNeil
On Monday, September 20, 2004, 5:46:00 AM, Roger wrote: RM Since the content-type multipart must specify a boundary, I suggest you RM filter all mail that have the content type multipart without boundary=. RM Currently PARMACIA.BIZ sends hundreds of spams daily to our domain and RM probably to

Re: [sniffer] Not running latest version

2004-09-20 Thread Pete McNeil
On Monday, September 20, 2004, 10:40:28 AM, Dan wrote: DS For whatever reason I don't think I've been running the latest version of DS sniffer as I don't even recall having updated to version 2. So I downloaded DS the latest version and copied renamed the .exe the .cfg files. DS Is there