Re: [SAtalk] Bad Dialups

2002-05-07 Thread Max Paperno
At 5/7/2002 09:58 AM -0500, dman wrote: >The conclusion is that your friend gets the short end of the stick >because his ISP allows spammers to use their service. You can, of >course, change any part of SA on your installation. > Actually this rule gets triggered by anyone who uses Earthlin

Re: [SAtalk] Bad Dialups

2002-05-07 Thread Derek Broughton
> On Tue, 7 May 2002, Derek Broughton wrote: > > > It's unlikely to be a truly false positive - ie, it may not be spam but I > > can pretty much guarantee you that he's trying to email you from an SMTP > > server on his own, dial-up, link instead of via Earthlink's SMTP server. > > > Explain that?

Re: [SAtalk] Bad Dialups

2002-05-07 Thread Doug Crompton
On Tue, 7 May 2002, Derek Broughton wrote: > It's unlikely to be a truly false positive - ie, it may not be spam but I > can pretty much guarantee you that he's trying to email you from an SMTP > server on his own, dial-up, link instead of via Earthlink's SMTP server. > -- > derek > Explain that

Re: [SAtalk] Bad Dialups

2002-05-07 Thread Derek Broughton
> Where is the data for KNOW_BAD DIALUPS stored? I am getting a false > negative from a friend who uses earthlink.net and that pushes it over the > top. I greped for a number of things in rules but did not find anything. I > hesitate to eliminate the rule altogether but that might also be an > opt

Re: [SAtalk] Bad Dialups

2002-05-07 Thread dman
On Tue, May 07, 2002 at 10:22:53AM -0400, Doug Crompton wrote: | Where is the data for KNOW_BAD DIALUPS stored? I am getting a false | negative from a friend who uses earthlink.net and that pushes it over the | top. I greped for a number of things in rules but did not find anything. I | hesitate t

[SAtalk] Bad Dialups

2002-05-07 Thread Doug Crompton
Where is the data for KNOW_BAD DIALUPS stored? I am getting a false negative from a friend who uses earthlink.net and that pushes it over the top. I greped for a number of things in rules but did not find anything. I hesitate to eliminate the rule altogether but that might also be an option. Doug