On Mon, 2009-10-05 at 09:32 -0700, Jefferson Davis wrote:
> Keep getting similar obvious (to me) spam - tuning recommendations?
> My threshold is torqued down to 3.5

AV:Sanesecurity.Junk.14595.UNOFFICIAL=6.1,
 AE_DETAILS_WITH_EMAIL=2.5, AE_DETAILS_WITH_MONEY=2, BOTNET_SOHO=-0.1,
 HTML_MESSAGE=0.001, JM_SOUGHT_FRAUD_3=3, L_P0F_UNKN=0.8,
 RCVD_IN_DNSWL_HI=-8, RELAY_US=0.01, SPF_PASS=-0.001, US_DOLLARS_3=1.165

Try the SOUGHT rules or the sanesecurity unofficial signatures.


-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to