LuKreme wrote to [EMAIL PROTECTED]:
antidrug.cf
Included in 3.0. Don't use it.
bigevil.cf
Huge, and deprecated. You should probably get some hits on this, but you really, really should enable the SURBL rules. http://www.surbl.org/ . This answer is now posted to this list daily. :-)
tripwire.cf
I disabled TW_ here, because, while I did see quite a few hits in a corpus of ~10,000s/10,000h, *none* of the messages were pushed over the threshold by the TW_* rules.
As for the others:
So, I have RDJ running with SA3.0 and
70_sare_adult.cf 70_sare_spoof.cf 72_sare_redirect_post3.0.0.cf 99_sare_fraud_post25x.cf evilnumbers.cf
Some of these get more frequent hits than others, but they all do hit at least occasionally, here.
but I haven't seen a hit yet on those rulesets. And I'm still getting spam from casinos and various other slime, so I was wondering if there is a test email designed to trigger some of these rulesets.
Sure, you can test them. Just have a look at the rules. The first rule in evilnumbers starts like so:
body EVILNUMBER_A_1XX_1 /1(?:0 West Broadway, Long Beach, NY|00 E\.
Knowing what I know about Perl, I parse that to mean
10 West Broadway, Long Beach, NY
ought to trigger the EVILNUMBER_A_1XX_1 rule. So, I send myself an email with that string in the body. Sure enough, I get a hit for that rule.
Are any of these redundant with SA3.0pre2 (--lint passes now).
OK, good. --lint passes. Have you restarted spamd?
Perhaps the new .cf files simply aren't being read? Where are they being stored? They should normally be in the same directory as local.cf, with world-readable permissions.
And, as always, checking the output of spamassassin -D -t will reveal many things that would otherwise be confusing. :-)
- Ryan
-- Ryan Thompson <[EMAIL PROTECTED]>
SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4
Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America
