Clay Davis wrote: > Here is my rule set... any I should/shouldn't have with SA v3.0.1? > > 00_FVGT_File001.cf > 10_misc.cf > 20_anti_ratware.cf > 20_body_tests.cf > 20_compensate.cf > 20_dnsbl_tests.cf > 20_drugs.cf > 20_fake_helo_tests.cf > 20_head_tests.cf > 20_html_tests.cf > 20_meta_tests.cf > 20_phrases.cf > 20_porn.cf > 20_ratware.cf > 20_uri_tests.cf > 23_bayes.cf > 25_body_tests_es.cf > 25_hashcash.cf > 25_spf.cf > 25_uribl.cf > 50_scores.cf > 60_whitelist.cf > 70_sare_adult.cf > 70_sare_bayes_poison_nxm.cf > 70_sare_evilnum0.cf > 70_sare_evilnum1.cf > 70_sare_genlsubj.cf > 70_sare_header.cf > 70_sare_header0.cf > 70_sare_header1.cf > 70_sare_highrisk.cf > 70_sare_html.cf > 70_sare_obfu.cf > 70_sare_oem.cf > 70_sare_random.cf > 70_sare_specific.cf > 70_sare_spoof.cf > 70_sare_stocks.cf > 70_sare_unsub.cf > 70_sare_uri0.cf > 70_sare_uri1.cf > 70_sare_whitelist.cf > 72_sare_bml_post25x.cf > 72_sare_redirect_post3.0.0.cf > 88_FVGT_Bayes_Poison.cf > 88_FVGT_headers.cf > 99_ClayScores.cf > 99_FVGT_Tripwire.cf99_PMNHG_Custom_BL.cf > 99_sare_fraud_post25x.cf > 99_uribl.cf > Backhair.cf > bogus-virus-warnings.cf > chickenpox.cf > mangled.cf > mime_validate.cf > subevil.cf > weeds_2.cf
I'm not familiar with quite a few of those. The only thing that sticks out is that you have uribl listed twice. You should find the most recent version and delete the other one. -- Bowie
