That sounds fine. We'll be here when that happens. If they have a
pattern to their alterations then we might code a broader heuristic
(with some wildcards) to capture when they move. It's all up to you.

Best,
_M

On Monday, August 2, 2004, 8:57:52 PM, Woody wrote:


WF> Oops  My current filter for didthey.. picked up the response from the list.

WF> We are currently filtering the didthey... beacon with a simple Imail phrase
WF> filter. Not seeing too much activity so far. We expect they will change the
WF> path in thier beacon soon to avoid detection. We will continue to use the
WF> phrase filter for now and may request a new rule when that fails to be
WF> effective.

WF> Thanks

WF> Woody
WF> -----Original Message-----
WF> From: [EMAIL PROTECTED]
WF> [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil
WF> Sent: Monday, August 02, 2004 12:14 PM
WF> To: Woody Fussell
WF> Subject: Re: [sniffer] Did They ReadIt


WF> On Monday, August 2, 2004, 12:06:30 PM, Woody wrote:

WF>> Does Sniffer have a rule that identifies email that uses the services of
WF>>www did they read it . com? If so, what category does it match. If not,
WF> can such
WF>> a rule or rules be included?

WF> I'm guessing that there isn't a rule since this message made it to the
WF> list and I don't recall it being anywhere.

WF> We can certainly add a rule (white or black) upon request for any
WF> registered rulebase.

WF>> Woody Fussell
WF>> Wilbur Smith Associates
WF>> [EMAIL PROTECTED]


WF>> This E-Mail came from the Message Sniffer mailing list. For
WF>> information and (un)subscription instructions go to
WF>> http://www.sortmonster.com/MessageSniffer/Help/Help.html



WF> This E-Mail came from the Message Sniffer mailing list. For information and
WF> (un)subscription instructions go to
WF> http://www.sortmonster.com/MessageSniffer/Help/Help.html


WF> This E-Mail came from the Message Sniffer mailing list. For
WF> information and (un)subscription instructions go to
WF> http://www.sortmonster.com/MessageSniffer/Help/Help.html



This E-Mail came from the Message Sniffer mailing list. For information and 
(un)subscription instructions go to 
http://www.sortmonster.com/MessageSniffer/Help/Help.html

Reply via email to