> Speaking of ninjas one slipped in here and whispered in my > ear that the original problem rocsca had might benefit from > the anti drug rules on the SARE web site. He should read the > various rule set descriptions and pick those which fit his > situation best.
Fine! I agree with you!! But I can't figure out what SARE rules I I have to use to block that email that SA does not block.. Moreover, could I update it with rules_du_jour? PS: I have the following conf for rules_du_jour.. TRUSTED_RULESETS="TRIPWIRE RANDOMVAL BOGUSVIRUS"; BR, rocsca