On Wed, 2014-09-17 at 16:47 +0200, Axb wrote: > On 09/17/2014 04:27 PM, Jesse Norell wrote: > <snip> > > > > Just a thought - maybe a config setting to not do automatic bayes > > training for a give from/to addr would be more appropriate? Say a meta > > rule (more a "flag" but I don't know enough SA rules to know if those > > exist) that you set in your own rules. > > > > Eg. disable all automatic training for these addrs: > > > > no_bayes_from whate...@list.com > > no_bayes_to ot...@list.com > > > > That would be reusable in other rules/places if appropriate > > something like this? > > tflags RULE_NAME userconf noautolearn
Yeah, something like that. :) Sounds like the concern isn't just feeding bad info to bayes though, but maybe this would be usable for Harald as part of the generated local.cf rules. -- Jesse Norell Kentec Communications, Inc. 970-522-8107 - www.kci.net