> TRIPWIRE, EVILNUMBERS, SARE_RANDOM, SARE_FRAUD, SARE_ADULT, ANTIDRUG No real need to subscribe to Tripwire, just download it once. It is a very stable ruleset and very unlikely to change, so you don't need to keep looking for changes.
> Now the update seems to work just fine. And I find the rules in /etc/ > spamassassin. But how can be sure they are working? I mean I haven't Grep thru a handful of spams looking for "SARE_". Or for tripwire, "TW_". YOu won't find hits in every spam (probably) but you should find a good number. Also make sure the files are in the same place as your local.cf file. Loren