Re: Farewell

Subject: Re: Farewell
From: David Neeley <dbneeley -at- oddpost -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Mon, 22 Sep 2003 11:51:03 -0700 (PDT)


Bonnie,

While your present rules are good for most if not all of the present worm messages, they can also delete valid messages people may try to send you. Imagine your IT department sending you email *internally* with a subject like: "Security measures to be applied immediately." Since it contains the word "security" your rule one would nix it and you would never see it.

By contrast, a bayesian filter would consider the entire corpus of your spam messages and build profiles that would quickly eliminate them but would not eliminate the valid message. At most, it would put it in a "questionable" folder.

However, one major problem is with Outlook Express itself. If you can, turn off the preview pane so that it will not automatically open messages for view--there are malicious code bits that can be buried in HTML mail that would already be doing their work simply by being displayed.

David

-----Original Message from Bonnie Granat <bgranat -at- editors-writers -dot- info>-----

These are my rules. I built them up a little at a time, adding words each
time I needed to. So you can combine some of these.
Rule 1

Apply this rule after the message arrives

Where the From line contains 'Microsoft Corporation Network Security Center'
or 'message delivery system' or 'Technical Bulletin' or 'Microsoft' or 'MS
Corporation Public Support' or 'Security' or 'MS' or 'Public' or
'Postmaster'

Delete it from server
...

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

NEED TO PUBLISH YOUR FRAMEMAKER CONTENT ONLINE?
?Mustang? (code name) is a NEW online publishing tool for FrameMaker that
lets you easily single-source content to Web, intranets, and online Help.
The interface is designed for FrameMaker users, so there is little or no
learning curve and no macro language required! See a live demo that
will take your breath away: http://www.ehelp.com/techwr-l3

---
You are currently subscribed to techwr-l as:
archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



Previous by Author: Re: Farewell
Next by Author: Re: Farewell
Previous by Thread: Re: Farewell
Next by Thread: RE: Farewell


What this post helpful? Share it with friends and colleagues:


Sponsored Ads