RE: Fwd: this address is no longer available

["Schmehl, Paul L" <pauls () utdallas edu>]

We're processing about 250,000 messages a day, and 5 is way too low.
Some of our users get vendor mail that comes in HTML with all sorts of
fancy crap in it, and 5 would put all that stuff straight in the trash.
We're set at 8 right now with just a few false positives.

If you're filtering your own personal mail, 5 might be just fine I
suppose.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

-----Original Message-----
From: David Hane [mailto:dlhane () sbcglobal net] 
Sent: Tuesday, May 13, 2003 6:14 PM
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Fwd: this address is no longer available


I had the same problem with the 5 setting early on too. My problem is
that I 
receive many email from foreign users. The language settings were
killing me 
due to the high rating (4 I think). Once I turned that test off my 5
setting 
has been 100% correct.

I would check the false positive messages then adjust the tests that are

giving you problems. Either disable them or lower their score.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html