Marcin Krol wrote: > > 2. Assuming that it does, which SARE rules do you use? Or should I > just add them all?
Don't just blindly add them all. Not all of them are appropriate for everyone and some of them have different versions for different SA versions. Read the descriptions and see which ones you think would work for you. Personally, I use these: 70_sare_adult.cf 70_sare_evilnum0.cf 70_sare_genlsubj0.cf 70_sare_header0.cf 70_sare_html0.cf 70_sare_obfu0.cf 70_sare_oem.cf 70_sare_random.cf 70_sare_specific.cf 70_sare_spoof.cf 70_sare_stocks.cf 70_sare_unsub.cf 70_sare_uri0.cf 70_sare_whitelist_rcvd.cf 70_sare_whitelist_spf.cf 72_sare_redirect_post3.0.0.cf 99_sare_fraud_post25x.cf -- Bowie
