Here is the list of rules I am currently using, in addition to the SA 3.0.4 default rules:
 
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
70_sare_evilnum1.cf
70_sare_genlsubj0.cf
70_sare_header0.cf
70_sare_html0.cf
70_sare_html1.cf
70_sare_obfu.cf
70_sare_oem.cf
70_sare_random.cf
70_sare_specific.cf
70_sare_spoof.cf
70_sare_stocks.cf
70_sare_unsub.cf
70_sare_uri0.cf
70_sare_whitelist.cf
72_sare_bml_post25x.cf
72_sare_redirect_post3.0.0.cf
88_FVGT_body.cf
88_FVGT_headers.cf
88_FVGT_rawbody.cf
88_FVGT_subject.cf
88_FVGT_uri.cf
99_FVGT_meta.cf
99_FVGT_Tripwire.cf
99_sare_fraud_post25x.cf
99_sober.cf
bogus-virus-warnings.cf
mime_validate.cf
mysurbl.cf
rolex.cf
stockspam.cf
subevil.cf
weeds_2.cf
 
Are there any of these rules that are redundant, no longer necessary, or of no benefit?  My mail volume used to be about 30,000 a day, and these rules were fine for that volume.  We're now getting upwards of 140,000 on some days, and my boxes are having trouble keeping up.  Rolex and stockspam are probably covered in others, but they're only about 2k a piece.  I'm hoping some of the larger ones can go buh-bye.

Reply via email to