On Sat, Jan 04, 2003 at 12:40:38PM +0100, Adrian 'Dagurashibanipal' von Bidder wrote:
> [the following false positive:]
> Thank you for your message regarding 
>      Systematic scanning from 209.241.48.162

I have a personal SA rule that's worth -5 for my cable modem IP address.
I don't see any way for the default rlueset to have any of the rules
that I find most effective for avoiding false positives:

 - mentions my IP address
 - uses my real name
 - includes part of my address
 - mentions keywords of topics I'm interested in

I wrote those when I first installed SA by looking through my "receipts"
folder (Amazon, Buy.Com, eBay, etc) and my (genuine) mailing list
acknowledgements for elements unique to me.

-- 
Ben Jackson
<[EMAIL PROTECTED]>
http://www.ben.com/


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to