Hello Deon, Tuesday, August 17, 2004, 1:33:08 AM, you wrote:
D> Thanks for the info Bob. I can wait! :) D> What sort of time frame do expect to be working towards (won't hold you to it ;)? I expect to have the General Subject and HTML files done this week. Header files will be done this week or next. Ratware next week or the week after. For those interested, the duplications and overlaps identified so far are: - SARE_RECV_IP_FRMOIP1 now duplicates RCVD_DOUBLE_IP_SPAM in 2.64 and 3.0.0 - SARE_MSGID_ALL_CAPS now duplicates MSGID_SPAM_CAPS in 3.0.0 - SARE_RECV_FORGE_OUTBLZ now duplicates FAKE_OUTBLAZE_RCVD in 3.0.0 - SARE_HEAD_XORIP_NOTIP now duplicates X_ORIG_IPNOT_IPV4 in 3.0.0 - SARE_SUB_FTC_PORN now duplicates SUBJECT_SEXUAL in 3.0.0 - SARE_SUB_PAREN_NUM greatly overlaps SUBJ_2_NUM_PARENS in 3.0.0 I'll publish the full list once this analysis is complete. Bob Menschel D> Robert Menschel wrote: >> Hello Deon, >> >> Monday, August 16, 2004, 3:36:45 PM, you wrote: >> >> D> Hi >> >> D> I am about to upgrade SA for the first time (from 2.61 to 2.64). What >> D> I am wanting to find out about is how do check whether rules which I >> D> have from SARE, for example, are now included by default in SA, or >> D> where default scores have changed significantly. >> >> When will you be doing the upgrade? >> >> I'm currently in the process of updating the General Subject, Header, and >> HTML rule sets to identify/eliminate the 2.64 and 3.0 duplications. >> >> In addition to files 0 through 3 (0 being most conservative/safest rules, >> 3 being most aggressive/risky), I'm creating >> * "eng" files, for rules that work well in the English language >> but should be avoided by systems that get many emails written in other >> languages, >> * "x30" files, for rules included in 3.0.0 distribution >> * "x264" files, for rules included in the 2.64 distribution >> * "arc" files, for rules that no longer hit any spam >> >> So when you migrate to 2.64, you'll want to avoid the x264 files. >> >> D> Are these an issue or is it safe to just go ahead withe upgrade. I >> D> will obviously be doing significant testing, but have been wondering >> D> about these 2 particular issues. >> >> Our scoring is conservative enough that it probably isn't an issue to >> begin with, and will be less of an issue when these updates to SARE are >> completed. >> >> After these three, ratware.cf is my next to review for duplication, >> unless some other SARE Ninja beats me to it. >> >> Bob Menschel >> >> >> -- Best regards, Robert mailto:[EMAIL PROTECTED]
