On Friday 30 January 2004 11:17 am, Jennifer Wheeler wrote:
> My bad. I just posted a change to body rule with the set, but it has to
> be rawbody. I realized this as soon as I hit send. (oops) Now... I
> dont know if rawbody looks at the headers... ?? If that doesn't fix
> it, I wouldn't kno
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]On Tuesday 27
January 2004 09:11 am, Dennis Davis wrote:
> >From: Matthew Trent <[EMAIL PROTECTED]>
> >Subject: [SAtalk] Re: Meta-tripwire idea
> >To: [EMAIL PROTECTED]
> >Date: T
On Friday 30 January 2004 11:19 am, Brent J. Nordquist wrote:
> Yup; my X-Face triggers one chickenpox. If you only get one I don't think
> that's a biggie.
No, but IMHO it should be as accurate as possible...
--
Matt
Systems Administrator
Local Access Communications
360.330.5535
-
s.com ([69.10.205.107])
by mail1.localaccess.com with esmtp (Exim 4.24)
id 1AmcfI-00027p-Nd
for xxx; Fri, 30 Jan 2004 09:42:48 -0800
From: Matthew Trent
Organization: Local Access Communications
To: xxx
Subject: Test
Date: Fri, 30 Jan 2004 09:56:01 -0800
User-Agent:
On Wednesday 28 January 2004 12:56 pm, Chris Santerre wrote:
> I had recently received an FP from a *new* invoice confirmation notice from
> a MAJOR computer equipment supplier. I was bummed at the fact that I would
> have to try to work around the FP. Then I looked at what it hit, and some
> were
On Tuesday 27 January 2004 09:43 am, Chris Barnes wrote:
> Let me 2nd this - on the server I run for my dept, we have had ZERO
> messages get through with this virus. Otoh, I spent 2 hours on the
> phone with a dozen or so friends explaining to them how to get this off
> of their machines (sometim
m ("only" about 120 a day for an
> office of six people) to quickly judge whether this is more effective
> than merely scoring individual tripwire rules at 0.07 each or
> whatever.
That would also help with the problem of the report exceeding Exim's header
size limit when a
On Tuesday 27 January 2004 09:43 am, Chris Barnes wrote:
> Let me 2nd this - on the server I run for my dept, we have had ZERO
> messages get through with this virus. Otoh, I spent 2 hours on the
> phone with a dozen or so friends explaining to them how to get this off
> of their machines (sometim
John Wilcock wrote:
> It struck me that since individual tripwire rules are at risk of FPs,
> but that multiple tripwire hits on the same message are much less so,
> it might be worthwhile assigning a significantly higher score to
> messages that hit lots of tripwire rules.
>
> Since there are so
I (and a few other people) have reported this with Tripwire, but I've just
installed Backhair and now the problem is much worse.
Basically those two rulesets output an entry in the report for every hit on
each of a gazillion rules. This is nice FYI stuff, but it results in headers
that exceed a
On Wednesday 14 January 2004 02:03 pm, Chris Santerre wrote:
> > Heh... sorry, it's not me having the problem with header length. I
> > was just asking. I notice that one could theoretically get 878
> > matches, which would make for a very woolly message header.
>
> LOL, sorry here as well, got my
On Wednesday 14 January 2004 12:35 pm, Chris Santerre wrote:
> OK silly question first: Did it lint correctly? Just making sure you
> downloaded it correctly.
>
> After that, I"ve never heard of a long hitlist causing this. I've CC'd the
> SATALK on it.
> Hm...
>
> --Chris
No, I didn't lin
12 matches
Mail list logo
