>> On 12/15/2010 11:57 AM, Andy Jezierski wrote: >>> Been away from the list for quite some time. Just updated SA from >>> 3.2.5 to 3.3.1. Have been trying to find a list of sa-update channels >>> that are still relevant but not with much success. >>> >>> Does anyone know is such a list exists, or if you know of which >>> additional channels can still be used. I know a lot of them have been >>> merged into SA and some are outdated and recommended not to be used.
> On 15/12/2010 1:32 PM, Bowie Bailey wrote: >> All of the good SARE rules have been merged into SA. All of the SARE >> update channels should no longer be used (as the rules are no longer >> being updated). >> >> The best additional channel to use at the moment is the Sought ruleset. On 15.12.10 14:30, Lawrence @ Rogers wrote: > Have to disagree on the Sought rules. I've seen them give quite a few > false positives (mostly on e-mail notifications from social networks > Facebook and Twitter), and hit on hardly any spam at all. I have seen many correct hits on SOUGHT (on mail that would be a FN otherwise) and FPs are usually cut off quite fast. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user friendly, it's just selective who its friends are...
