Jim Matuska Jr.
Computer Tech2, CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
----- Original Message ----- From: "Pete McNeil" <[EMAIL PROTECTED]>
To: "Jim Matuska" <sniffer@SortMonster.com>
Sent: Tuesday, May 17, 2005 11:54 AM
Subject: Re[2]: [sniffer] New Spam Storm
On Tuesday, May 17, 2005, 1:44:30 PM, Jim wrote:
JM> Pete, JM> Is there a possibility of setting up another return code for JM> situations such as this such as a blacklist rulecode that only has JM> rules for messages such as these that should be blacklisted JM> immediately. I wouldn't mind setting certain high priority rules JM> to block immediately.
A couple of things --- When we first saw this we didn't know it was a virus, so we were blocking the messages as normal spam.
Once we did know it was malware we coded it to the malware group.
No filters are perfect (even ours ;-) but I believe the code you are looking for is our malware result code: 55
That's as close as I can come to this requests without doing something new and therefore less reliable.
Hope this helps,
_M
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
