Ed Russell wrote: > Ymmv of course, but here is the list that I use. I have read through the > descriptions of each and made a case by case decision. My average scanning > time is around 9.5 seconds. I did as you did in initially and added them > all. D'oh. Of course some rule sets are for specific versions of SA, watch > that. Also I only use the rules that have no triggered a false positive as > I drop the caught spam at the filter level. For me a false positive is bad > news. Also as was suggested to me, ensure if you can utilize RBL and/or > user verification at the MTA level. Cheers. > > Ed
Ed... Suggestion. Unless you're running SA 2.6x, ditch antidrug. These rules are already in SA 3.0.0 and higher, so by adding the ruleset you'll downgrade any improvements or changes made by the SA developers. > > TRUSTED_RULESETS= > TRIPWIRE > ANTIDRUG