On Mon, 9 Nov 2015, Amir Caspi wrote:
On Nov 9, 2015, at 10:09 AM, John Hardin <jhar...@impsec.org> wrote:
score URI_MALWARE_CWALL 6.000
Is your threshold higher than 5? Otherwise this is a poison pill for a
"potential" hit.
My Spam threshold is 5 and my Quarantine threshold is 10.
I'd suggest that this malware is sufficiently toxic to err on the side of
FPs.
As always, adjust recommended scores according to your local conditions
and judgement.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Perfect Security and Absolute Safety are unattainable; beware
those who would try to sell them to you, regardless of the cost,
for they are trying to sell you your own slavery.
-----------------------------------------------------------------------
2 days until Veterans Day
