[sanesecurity] Re: False Positive
- From: "McDonald, Dan" <Dan.McDonald@xxxxxxxxxxxxxxxx>
- To: <sanesecurity@xxxxxxxxxxxxx>
- Date: Fri, 30 Oct 2009 10:58:44 -0500
On Fri, 2009-10-30 at 08:33 -0700, Bill Landry wrote:
> McDonald, Dan wrote:
> > On Fri, 2009-10-30 at 11:40 +0000, Peter wrote:
> >> I've got customers complaining of false positives on createsend1 _dot_ com
> >>
> >
> > Not to say I don't catch a lot with it. I had 13517 hits on
> > INetMsg.SpamDomain-2w that resulted in SPAM, 42 that did not, and 6624
> > hits on INetMsg.SpamDomain-2m that resulted in SPAM, and 23 that did
> > not.
>
> Dan, of the 42 and 23 that hit but did not result in spam, were they
> FPs, or were they spam that did not score high enough to be classified
> as spam? Just curious...
From what little I have in the logs, they look pretty spammy to me,
other than the two for the users.spamassassin mailing list, so probably
just didn't score high enough to get blocked. I didn't get complaints
on them, so hard to tell for certain (and no quarantine for me to go
back and check).
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com
Other related posts:
