On Sunday 15 June 2008 12:03 pm, John Hardin wrote: > Folks: > > I tried posting this to [EMAIL PROTECTED] but it bounced... > > I'm seeing recent 419 spams (e.g. the ATM Card variant) making it > through SA lately. It hits BAYES_99, but no SARE rules. > > Are these rules defunct? > > Suggestion: grabbing Justin Mason's SOUGHT tools and using them against > a 419-specific corpus might be a really good way to keep the fraud > ruleset current without a lot of manual effort...
Are you running the ClamAv plug-in? It catches all of those here on my box. -- Chris KeyID 0xE372A7DA98E6705C
pgp3wS5jYinft.pgp
Description: PGP signature