Re: SA Rules Auto-Update ?

2007-05-11 Thread Pete Russell
His question may have been pretty basic, born of laziness. But when you respond with man sa-update or RTFM, then you end up with a mailing list archive full of useless info, lowering its value as a useful resource. Ignore or respond with something useful. (In my opinion) Duane Hill wrote: On

How would i write this rule?

2007-04-03 Thread Pete Russell
We have a parent company that uses a completely different domain name. We are on the same network (and therefore trusted_networks). Some of the users in sub company have email addresses in the parwent company and these are forwarded to email acocunts in the sub company. When spam is sent the

Re: How would i write this rule?

2007-04-03 Thread Pete Russell
adam lanier wrote: On Wed, 2007-04-04 at 00:37 +1000, Pete Russell wrote: How do i write a rule that says; if mail is recieved from parent company email gateway/s AND the from address is not from the parent company domain THEN give XX score. Something like? header __GATEWAY_RELAY

Re: sa-learn on dedicated spamabuse email account

2007-01-25 Thread Pete Russell
You have described why it wont work as good. Using your method the headers become useless - bayes ill learn only the body/subject content. You would need to tell bayes to ignore the headers. With pop3 you only have the option you describe - this may still work ok? Pete Oenus Tech Services