On 6/27/2011 2:39 PM, Kevin A. McGrail wrote: > >> Sorry for posting to both dev and users but it looks like the SEM >> lists have been pushed into production rules again and are showing up >> in 72_active.cf under 3.3.1. This happened around 23:00 (GMT-4) last >> night. Someone fix that? > However, I am trying to see if I agree but all I see is T_* rules. > These rules may fire but will only have a score of 0.01. I see a lot of > T_ rules so is it incorrect behavior that T_ rules are promoted?
Yes, it is incorrect behavior because while it isn't adding anything of significance to the score it is still querying my public servers. I don't think asking people to put another set of rules in to disable rules that never should have been pushed is acceptable. This is the second time it has happened (that I know of) without any warning, notice or QA on the rulesets. As a SA user I find this disturbing. As a blacklist operator I find this abusive. Please tell me that it will be addressed in some way other than telling people to just disable the rules. --Blaine
