On Thu, Oct 19, 2006 at 10:27:57AM -0700, R Lists06 wrote:
> Greetings
>
> I pulled down a large subset of all the sare filters today on a test mail
> server...
>
> -rw-r--r-- 1 root root 53868 Apr 20 02:00 70_sare_adult.cf
> -rw-r--r-- 1 root root 3839 Jun 1 2005 70_sare_bayes_poison_nxm.cf
> -rw-r--r-- 1 root root 24298 Oct 5 2005 70_sare_evilnum0.cf
> -rw-r--r-- 1 root root 45933 Dec 26 2005 70_sare_genlsubj0.cf
> -rw-r--r-- 1 root root 123406 May 21 13:00 70_sare_header0.cf
> -rw-r--r-- 1 root root 28066 Jun 3 22:00 70_sare_html0.cf
> -rw-r--r-- 1 root root 51886 Oct 1 2005 70_sare_obfu0.cf
> -rw-r--r-- 1 root root 12739 Dec 27 2005 70_sare_oem.cf
> -rw-r--r-- 1 root root 18190 Dec 12 2005 70_sare_random.cf
> -rw-r--r-- 1 root root 97820 May 27 20:00 70_sare_specific.cf
> -rw-r--r-- 1 root root 20301 Jul 25 09:00 70_sare_spoof.cf
> -rw-r--r-- 1 root root 59515 Oct 18 13:00 70_sare_stocks.cf
> -rw-r--r-- 1 root root 25124 Nov 12 2005 70_sare_unsub.cf
> -rw-r--r-- 1 root root 17879 Oct 4 2005 70_sare_uri0.cf
> -rw-r--r-- 1 root root 13211 Jun 1 2005 72_sare_bml_post25x.cf
> -rw-r--r-- 1 root root 15481 May 15 20:00 72_sare_redirect_post3.0.0.cf
> -rw-r--r-- 1 root root 10147 Jun 1 2005 99_sare_fraud_post25x.cf
>
> I didn't snag all of them.
>
> Im still contemplating the one that says it needs network tests on and spf
> on and something else.
>
> For those of you that use these, can you rate them on how effective in
> general?
The "adult" one is good, though I had some FPs on a corpus I ran
through and derated some specific scores a bit. (I'm also using an
alternate scoring system.) I've been running that one for at least a
couple years.
Just adding the "stocks" one now, as it's the main spam category
that's getting through at the moment.
I'd view both those, at least, as essential.
-- Clifton
--
Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED]
President - I and I Computing * http://www.iandicomputing.com/
Custom programming, network design, systems and network consulting services
