Hello Sniffer folks, Just a quick note to remind everyone of some recent changes to the rule base and some old standing policies.
_________________________________________ WE HAVE SPLIT THE EXPERIMENTAL RULE GROUP The Experimental rule group has been split into two parts so that the IP rules which tend to have a few false positives can be isolated. Reference: <http://www.sortmonster.com/MessageSniffer/Help/ResultCodesHelp.html> The two groups are: Experimental Abstract (62) - This group is now very safe. Preliminary analysis of the potential FP rate for this group shows that it is very low. You should consider increasing the weight for this group for best performance. Experimental Received [ip] (60) - This group contains all of the dynamically generated IP rules. The FP rate for this group is moderate to low and will continue to fall over the following weeks as we have changed the screening methods used to generate these rules. Group 60 used to be the Gray Hosting rule set which has been retired. You should reduce the strength of this group by about 25% from your nominal weight for sniffer results. This should roughly match the potential for FP in this group over the short term. You should also revisit this group periodically to see if you can tolerate higher weights as we increase the performance of our screening process. We have found that we frequently have IPs in this rule group that are not yet listed in alternatives such as DNSBLs, but which become listed after a short time. As much as possible, this group is probably worth the risk - YMMV. _________________ SPAM@ Submissions We have been seeing what appear to be technical support questions and notes to us in spam@ submissions. For safety reasons we cannot respond or even interpret these messages since we also frequently receive misleading notes through this channel. In order to avoid security problems and/or poisoning attempts we have a strong policy to ignore any message in spam@ that appears to be anything but pure spam. Anything that doesn't look like spam we delete without reading. The spam@ address is ONLY for submitting spam that you wish to have filtered. Please submit any questions or comments to our support@ address and be sure to include your 8 character license ID in your note so that we can identify you properly. Following these guidelines will help to improve the performance of your Message Sniffer installation as well as those of our other users. We are working hard to make Message Sniffer the best filtering system available - we thank you for all of your help and support! Thanks, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html