On 6.1.2011 0:10, Lawrence @ Rogers wrote: > > I would remove the p0f and botnet rules if I were you. That would solve > your problem. >
I find BOTNET an excellent addition to my SA. TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 BOTNET 1286 12.76 81.91 0.04 2 HTML_MESSAGE 1213 32.76 77.26 24.56 3 URIBL_BLACK 1201 12.24 76.50 0.41 4 PYZOR_CHECK 1178 11.73 75.03 0.08 5 RCVD_IN_BRBL_LASTEXT 1160 11.52 73.89 0.04 6 URIBL_WS_SURBL 1119 11.12 71.27 0.05 7 T_URIBL_BLACK_OVERLAP 1094 10.87 69.68 0.05 8 URIBL_DBL_SPAM 1043 10.37 66.43 0.05 9 RAZOR2_CHECK 1040 10.33 66.24 0.04 10 BAYES_99 1001 9.92 63.76 0.01 -- Fame is a vapor; popularity an accident; the only earthly certainty is oblivion. -- Mark Twain