On Tue, 28 Feb 2012, Axb wrote:
On 02/28/2012 03:27 PM, John Hardin wrote:
If there is community consensus that detecting fill-in-the-form spams
isn't valuable enough to justify the overhead of running these
(admittedly complex) rules, then I can disable them in my sandbox; but
I'd like a consensus before doing that.
ruleqa's overlaps should give us more data.
If we can agree a small group to review hits, I'm pretty sure we'd find lots
of cases where rules are redundant, merely by autopromoting similar rules
from various sandboxes.
Oh, definitely. I have noticed that before but haven't put a lot of effort
into reducing dupes.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
A superior gunman is one who uses his superior judgment to keep
himself out of situations that would require the use of his
superior skills.
-----------------------------------------------------------------------
14 days until Albert Einstein's 133rd Birthday
