> per message isn't killing us - so I'm not bothering. And of course I
> could always disable all the network tests - but that effectively makes
> SA useless - so I can't imagine doing that.

Hi Jason,

   I beg to disagree with your above statement - I run with all
network tests disabled, and I have a fantastic detection rate.

   Granted, there will always be exceptions (I probably am one).
But, using completely stock rules, no SARE, and no network tests
still proves extremely accurate for me.  Yay Bayes!  :)

Benny


-- 
"I'd rather staple a skunk to my forehead and go to a trade show
for banjo makers."                            -- PHB's secretary,
                                                 Dilbert, 07-2002



-------------------------------------------------------
This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening
July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
core and dual graphics technology at this free one hour event hosted by HP,
AMD, and NVIDIA.  To register visit http://www.hp.com/go/dualwebinar
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to