Re: Help with config... I went a LITTLE overboard

2006-02-16 Thread Loren Wilton
Just offhand you need to check which version of SA you are using, and then READ the descriptions of the various SARE rule files - in particular, those that only work on particular versions: > ANTIDRUG > SARE_FRAUD_PRE25X > SARE_BML_PRE25X > SARE_GENLSUBJ_X30 > SARE_HTML_PRE300 > SARE_HEADER_X264_X

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread jdow
Pikers. I run 47 sets of rules. I should probably get rid of evilnumbers, though. It may be overkill at this time. (Or rather underkill?) {^_^} - Original Message - From: "" <[EMAIL PROTECTED]> LMAO Sheesh! Here is what I have: SARE_SPAMCOP_TOP200 SARE_STOCKS EVILNUMBERS S

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread qqqq
06 12:56 PM | To: Joey; SpamAssassin | Subject: Re: Help with config... I went a LITTLE overboard | | LMAO | | Sheesh! | | Here is what I have: | SARE_SPAMCOP_TOP200 | SARE_STOCKS | EVILNUMBERS | SARE_RANDOM | SARE_ADULT | SARE_FRAUD | SARE_SPOOF | SARE_OEM | |

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Ed Russell
: Wednesday, February 15, 2006 1:31 PM To: [EMAIL PROTECTED] Cc: 'SpamAssassin' Subject: Re: Help with config... I went a LITTLE overboard Ed Russell wrote: > Ymmv of course, but here is the list that I use. I have read through the > descriptions of each and made a case by ca

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Joey
Wouldn't the SARE_SPAMCOP_TOP200 already be working if you use spamcop in the RBL? Thanks -Original Message- From: [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 15, 2006 12:56 PM To: Joey; SpamAssassin Subject: Re: Help with config... I went a LITTLE overboard

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Bowie Bailey
Joey wrote: > OK I got a little greedy in hoping to stop more spam, to the point > that I am making my servers crawl. > > I read through the rules and I thought the difference between lets say > SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 was that 1 was a little more > aggressive and if you used 1 you sho

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Joey
I missed that... Got it. THanks -Original Message- From: Dave Pooser [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 15, 2006 1:05 PM To: SpamAssassin Subject: Re: Help with config... I went a LITTLE overboard > SARE_HTML > SARE_HTML0 > SARE_HTML1 > SARE_HTML2

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Joey
--Original Message- From: Kelson [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 15, 2006 1:28 PM To: SpamAssassin Subject: Re: Help with config... I went a LITTLE overboard Joey wrote: > Below is my config, how can I pick what to use -vs- not when we are > getting slammed and need all

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread Matt Kettler
Ed Russell wrote: > Ymmv of course, but here is the list that I use. I have read through the > descriptions of each and made a case by case decision. My average scanning > time is around 9.5 seconds. I did as you did in initially and added them > all. D'oh. Of course some rule sets are for spe

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread Matt Kettler
Joey wrote: > OK I got a little greedy in hoping to stop more spam, to the point that I am > making my servers crawl. > > I read through the rules and I thought the difference between lets say > SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 was that 1 was a little more aggressive > and if you used 1 you sho

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread Kelson
Joey wrote: Below is my config, how can I pick what to use -vs- not when we are getting slammed and need all the blocking we can, but of course don't want the server to die in the next 24 hours. I cleaned up the file some as you can see from my FIRST CONFIG FILE to SECOND. If I'm reading this

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread Dave Pooser
> SARE_HTML > SARE_HTML0 > SARE_HTML1 > SARE_HTML2 > SARE_HTML3 > SARE_HTML4 SARE_HTML includes the 0, 1, 2 and 3 rulesets, so you're duplicating some scans. Same with SARE_HEADER and some of the others IIRC -- Dave Pooser Cat-Herder-in-Chief Pooserville.com "This administration cannot be tru

Re: Help with config... I went a LITTLE overboard

2006-02-15 Thread qqqq
LMAO Sheesh! Here is what I have: SARE_SPAMCOP_TOP200 SARE_STOCKS EVILNUMBERS SARE_RANDOM SARE_ADULT SARE_FRAUD SARE_SPOOF SARE_OEM | | FIRST CONFIG FILE | | SA_DIR="/etc/mail/spamassassin" | SA_RESTART="killall -HUP sp

RE: Help with config... I went a LITTLE overboard

2006-02-15 Thread Ed Russell
TOCKS --- Talk is cheap since supply always exceeds demand. --- -Original Message- From: Joey [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 15, 2006 12:37 PM To: SpamAssassin Subject: Help with config... I went a LITTLE overboard

Help with config... I went a LITTLE overboard

2006-02-15 Thread Joey
OK I got a little greedy in hoping to stop more spam, to the point that I am making my servers crawl. I read through the rules and I thought the difference between lets say SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 was that 1 was a little more aggressive and if you used 1 you should also use 0 and so on