Re: SA-update: failing for khopesh.com rules?

2011-08-08 Thread John Hardin
On Mon, 8 Aug 2011, Adam Katz wrote: (I hear the publishing mechanism now allows for scores set in the sandboxes to act as upper limits on published rules. That would solve this issue.) Confirmed. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Disposition deleted

2011-08-08 Thread John Hardin
On Mon, 8 Aug 2011, Jeff Mincy wrote: Can somebody clue me in on how to match 'Disposition: automatic-action/MDN-sent-automatically; deleted' in a disposition-notification mime attachment? --_=_NextPart_001_01CC55E0.440F392C Content-Type: message/disposition-notification Content-Tran

Re: SA-update: failing for khopesh.com rules?

2011-08-08 Thread Adam Katz
On Fri, 05 Aug 2011 10:49:36 -0700, Adam Katz wrote: >> I fixed this yesterday and updates are now fully functional. On 08/05/2011 07:36 PM, Benny Pedersen wrote: > super, i just noticed nopublis in the above file, is this intended ? Short answer: Yes. The GA is too slow to publish them itself.

Disposition deleted

2011-08-08 Thread Jeff Mincy
Can somebody clue me in on how to match 'Disposition: automatic-action/MDN-sent-automatically; deleted' in a disposition-notification mime attachment? --_=_NextPart_001_01CC55E0.440F392C Content-Type: message/disposition-notification Content-Transfer-Encoding: 7bit Final-Recipi

Re: FP: FILL_THIS_FORM_LONG

2011-08-08 Thread RW
On Mon, 08 Aug 2011 10:00:20 +0200 Tom Kinghorn wrote: > Good morning list. > > I have a client complaining that his mails are being tagged > incorrectly. > > I have included a link to the message: http://pastebin.com/Y69VUMym > > It would appear that he is correct. > > This is a black test me

Re: FP: FILL_THIS_FORM_LONG : typo corrected

2011-08-08 Thread Michael Scheidell
On 8/8/11 6:30 AM, Tom Kinghorn wrote: On 08/08/2011 12:23, Michael Scheidell wrote: On 8/8/11 4:16 AM, Tom Kinghorn wrote: Well spotted. I missed that. it was 4am :-) -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 >*| *SECNAP Network Security Corporation * Best Mobile Sol

Re: FP: FILL_THIS_FORM_LONG : typo corrected

2011-08-08 Thread Tom Kinghorn
On 08/08/2011 12:23, Michael Scheidell wrote: On 8/8/11 4:16 AM, Tom Kinghorn wrote: Well spotted. I missed that. Apologies & thanks

Re: FP: FILL_THIS_FORM_LONG : typo corrected

2011-08-08 Thread Michael Scheidell
On 8/8/11 4:16 AM, Tom Kinghorn wrote: Good morning list. I have a client complaining that his mails are being tagged incorrectly. no, they are being tagged correctly. I have included a link to the message: http://pastebin.com/Y69VUMym It would appear that he is correct. This is a BLANK t

FP: FILL_THIS_FORM_LONG : typo corrected

2011-08-08 Thread Tom Kinghorn
Good morning list. I have a client complaining that his mails are being tagged incorrectly. I have included a link to the message: http://pastebin.com/Y69VUMym It would appear that he is correct. This is a BLANK test message with 2 jpeg images. however, it hits the rules: FILL_THIS_FORM & F

FP: FILL_THIS_FORM_LONG

2011-08-08 Thread Tom Kinghorn
Good morning list. I have a client complaining that his mails are being tagged incorrectly. I have included a link to the message: http://pastebin.com/Y69VUMym It would appear that he is correct. This is a black test message with 2 jpeg images. however, it hits the rules: FILL_THIS_FORM & FI