-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 John D. Hardin wrote: > SARE ninjas lurking about: > > I tried to send the following to Matt Yackley via > [EMAIL PROTECTED], but that address bounced. Is Matt (or anyone > else) still maintaining the SARE fraud rulesets? > > Matt: > > I'm getting a lot of 419 spams that aren't hitting fraud rules in > 99_sare_fraud_post25x.cf at all. I note that the ruleset has > apparently not been touched since 2004 - is it abandoned and no longer > relevant for 3.1.x? > > Thanks! > > -- > John Hardin KA7OHZ http://www.impsec.org/~jhardin/ > [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > ----------------------------------------------------------------------- > Vista: because the audio experience is *far* more important than > network throughput. > ----------------------------------------------------------------------- > 21 days until Talk Like a Pirate day >
John, I'm pretty much the maintainer of all the old rules for SARE. I think most of the 419 rules should be pretty much now in SA 3.2.x they are called ADVANCED_FEE* and something like NIGERIAN_419* or something like that. I'll see if I can ping Matt on our SARE list. - -- -Doc Penguins: Do it on the ice. 8:44am up 4 days, 16:55, 17 users, load average: 0.18, 0.30, 0.37 SARE HQ http://www.rulesemporium.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFG1eN9qOEeBwEpgcsRAgpbAJwNBHfSni+qgSSQCZhBtxrSqSAm4gCfSTmF S46V9o8D6rYgbB6b1TP281M= =l93X -----END PGP SIGNATURE-----
