Actually the "0" rules are rules which have hit ONLY spam, and are the
safest for preventing false positives.
>>> "Loren Wilton" <[EMAIL PROTECTED]> 02/27 10:37 PM >>>
Check the SARE page for the various rulesets to see if any have been
depreciated for 3.0. I don't believe any of the ones you have listed
have
been, but it is worht a check.
That said: you have some ANCIENT rulesets there that have been updated
several times and have new names. I don't believe that we have any
rulesets
now with numbers above 70.
Also, you show header0 and gensubj0. Almost always you would also want
the
"1" version of these rulesets. The "0" version mostly just sets up
stuff
used by the other sets, I believe.
> 70_SARE_Adult.cf.bak
> 70_SARE_Genlsubj0.cf.bak
> 70_SARE_Header0.cf.bak
> 70_SARE_Random.cf.bak
> 70_SARE_SPOOF.cf.bak
> 71_SARE_Redirect_pre3.cf.bak
> 72_SARE_BML.cf.bak
> 99_FVGT_Tripwire.cf.bak
> 99_OBFU_drugs.cf.bak
> 99_SARE_Fraud.cf.bak
> 99_SARE_OEM.cf
Antidrug is in 3.0
> * antidrug.cf.bak
> backhair.cf.bak
Dump bigevil! Turn on the net rules instead.
> * bigevil.cf.bak
> bogus-virus-warnings.cf.bak
> * chickenpox.cf.bak
Evilnumbers can be useful if you don't have net rules running, but the
net
tests will generally do better.
> evilnumbers.cf.bak
Some of the ratware stuff is probably in 3.0. Also, there is some in
SARE
rulesets, such as Random and Specific.
I think (though I'm not positive) that random and useless are old
depreciated rulesets.
> ratware.cf.bak
> useless.cf.bak
> weeds.cf.bak
Backhair, bogus-virus-warnings (which may have been updated since your
version), chickenpox, tripwire, and weeds can all still be useful
rulesets,
even they haven't been updated in ages.
Loren
