Where exactly can I find the new RCVD_FORGED_WROTE2 rule you refer to? I
have RCVD_FORGED_WROTE in my 80_additional.cf file, but I don't have any
RCVD_FORGED_WROTE2 rule. And yes, I have run sa-update to get the latest
updates available :)
Cheers,
Jeremy
"Tony Finch" <[EMAIL PROTECTED]>
On Mon, Nov 20, 2006 at 11:44:19PM +, Tony Finch wrote:
> SA should do better with these since the new RCVD_WROTE2 rule should
> trigger. They also follow the same forgery pattern with the
> From/To/Message-ID lines.
What's the problem with these mails?
X-Spam-Status: Yes, score=14.2 required
Hold your horses -- it was only added to SVN last night ;) It
needs to be tested first, to ensure it catches spam without FPs,
before it gets published...
--j.
Jeremy Fairbrass writes:
> Where exactly can I find the new RCVD_FORGED_WROTE2 rule you refer to? I
> have RCVD_FORGED_WROTE in my 80_
