On Sunday, June 12, 2011, Warren Togami Jr. <wtog...@gmail.com> wrote: > On 6/12/2011 12:32 AM, Warren Togami Jr. wrote: > > On 6/11/2011 10:03 AM, Justin Mason wrote: > > guys -- I'm going to make the whole question moot (in trunk at least) > -- the only reason SOUGHT and SOUGHT_FRAUD were being checked in there > was to make their accuracy visible in ruleqa. It's been months since > I've looked at that, so it's needless. I'll remove them from svn > asap. > > --j. > > > WAIT!!! Wouldn't this remove our ability to check for false positives of > your patterns against the much larger ham collection of nightly masscheck? > > > The alternative is to filter SOUGHT from the sa-update rule updates with a > script, but still allow it in the nightly masschecks. Testing sought in > nightly masschecks has been useful to occasionally find obvious SOUGHT > problems, or sometimes to locate spam that was misplaced in the ham folder.
Sure -- if that's preferable we can do that. We just need to be diligent about tflags Nopublish. > Warren >
