[SARE] New Ruleset: High Risk

[Robert Menschel <Ro...@Menschel.net>]

SARE has just published a new rule set, a "high risk" rule set, to
contain those rules which we believe are useful to a large number of
sites, rules that can be used to identify spam quite reliably,
but rules which theoretically can just as easily flag ham,
and therefore should be avoided by highly conservative and/or cautious
installations.

You'll find information about this new rule set at
http://www.rulesemporium.com/rules.htm#highrisk

So far there is just one rule in this file, moved here from our spoof
rule set, because it did not meet the high standard of "no ham" that we
maintain for the spoof rule set.

Bob Menschel

Re: [SARE] Ruleset Updated: header_abuse

[Robert Menschel <Ro...@Menschel.net>]

Sare has updated the header_abuse rule set at
http://www.rulesemporium.com/rules.htm#header_abuse

Primary changes:
Replaced BAD_X_HEADERS with SARE_HEAD_SPAM
Deleted  SARE_HDR_MSG_INFO; now part of SARE_HEAD_SPAM

Those with RDJ active should automatically receive this update.

Bob Menschel

Re: [SARE] New Ruleset: Specific Spam

[Robert Menschel <Ro...@Menschel.net>]

SARE has just published a new rule set, 70_sare_specific.cf,
intended to catch the M.O. of specific spammers and/or
specific spam that might otherwise elude more general-purpose rules.
Our intent is that this rule set should not hit any non-spam.

Note that __subrules used within this rule set will frequently hit ham,
but the meta tests or other tests with scores should NOT hit any ham.

This rule set replaces (and incorporates) Chris Santerre's Mr. Wiggly
rules. Please update and RDJ parameters.  The Mr. Wiggly rule set will be
deleted in a month.

You'll find the new rule set at
http://www.rulesemporium.com/rules.htm#specific 

Bob Menschel