Re: SARE and RulesDuJour still relevant

2011-01-17 Thread Benny Pedersen
On Mon, 17 Jan 2011 11:43:16 +0100, Matus UHLAR - fantomas wrote: > On 14.01.11 23:19, Benny Pedersen wrote: >> meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS) > > I don't see any benefit of this rule, do you? it only hits ham here, never spam, so wanted to know if that same in public corpus, in

Re: SARE and RulesDuJour still relevant

2011-01-17 Thread Matus UHLAR - fantomas
> On Fri, 14 Jan 2011 11:04:49 -1000, "Warren Togami Jr." > wrote: > > > Anyone else have effective local rules? Please let me know and I'll put > > > them into the nightly masscheck for testing. On 14.01.11 23:19, Benny Pedersen wrote: > meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS) I don't

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Warren Togami Jr.
On 01/15/2011 01:36 AM, Ned Slider wrote: In a year of running them locally I've never seen them hit on a ham message. They appear to hit quite well for me because I pre-filter 95%+ of my spam at the smtp level (greylisting, HELO checks, spamhaus etc) so SA only gets to see the difficult to catc

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Ned Slider
On 15/01/11 01:54, John Hardin wrote: On Fri, 14 Jan 2011, Ned Slider wrote: header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describe NSL_RCVD_HELO_USER Received from HELO User Might want to combine into a meta rule with existing NSL_RCVD_FROM_USER rule: header NSL_RCVD_FROM_USER Rece

Re: SARE and RulesDuJour still relevant

2011-01-15 Thread Ned Slider
On 15/01/11 00:19, Warren Togami Jr. wrote: On 01/14/2011 01:09 PM, Ned Slider wrote: On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread John Hardin
On Fri, 14 Jan 2011, Ned Slider wrote: header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describeNSL_RCVD_HELO_USER Received from HELO User Might want to combine into a meta rule with existing NSL_RCVD_FROM_USER rule: header NSL_RCVD_FROM_USER

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread John Hardin
On Fri, 14 Jan 2011, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. I need to put in my postcard rules... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.o

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Warren Togami Jr.
On 01/14/2011 01:09 PM, Ned Slider wrote: On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describe NSL_RCVD_HELO_U

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Ned Slider
On 14/01/11 21:04, Warren Togami Jr. wrote: Anyone else have effective local rules? Please let me know and I'll put them into the nightly masscheck for testing. Warren header NSL_RCVD_HELO_USER Received =~ /helo[= ]user\)/i describeNSL_RCVD_HELO_USER Recei

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Benny Pedersen
On Fri, 14 Jan 2011 11:04:49 -1000, "Warren Togami Jr." wrote: > Anyone else have effective local rules? Please let me know and I'll put > them into the nightly masscheck for testing. meta SPF_NICE_PASS (SPF_HELO_PASS && SPF_PASS)

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Warren Togami Jr.
On 1/14/2011 2:28 AM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing an sa-up

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread James Lay
On 1/14/11 6:38 AM, "Jason Bertoch" wrote: >On 2011/01/14 7:28 AM, James Lay wrote: >> Hey All! >> >> Been a while since I did a full blown install of SpamAssassin, and as >> I'm looking at my old setup, I see a fair amount of changes. I have the >> SARE rules as well as RulesDuJour running, but

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Matus UHLAR - fantomas
> On 01/14/2011 01:28 PM, James Lay wrote: >> Been a while since I did a full blown install of SpamAssassin, and as >> I'm looking at my old setup, I see a fair amount of changes. I have >> the SARE rules as well as RulesDuJour running, but noticed that on a >> fresh install of SA, after doing an

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Jason Bertoch
On 2011/01/14 7:28 AM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing an sa-u

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Kai Schaetzl
This is getting asked about every week :-) Short answer: no, not relevant anymore, don't use. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: SARE and RulesDuJour still relevant

2011-01-14 Thread Bernard Lheureux
On 01/14/2011 01:28 PM, James Lay wrote: Hey All! Been a while since I did a full blown install of SpamAssassin, and as I'm looking at my old setup, I see a fair amount of changes. I have the SARE rules as well as RulesDuJour running, but noticed that on a fresh install of SA, after doing an sa