You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "John D. Hardin" <jh...@impsec.org> on 2007/08/29 22:25:49 UTC
SARE fraud ruleset rotted?
SARE ninjas lurking about:
I tried to send the following to Matt Yackley via
fraud@rulesemporium.com, but that address bounced. Is Matt (or anyone
else) still maintaining the SARE fraud rulesets?
Matt:
I'm getting a lot of 419 spams that aren't hitting fraud rules in
99_sare_fraud_post25x.cf at all. I note that the ruleset has
apparently not been touched since 2004 - is it abandoned and no longer
relevant for 3.1.x?
Thanks!
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Vista: because the audio experience is *far* more important than
network throughput.
-----------------------------------------------------------------------
21 days until Talk Like a Pirate day
Re: SARE fraud ruleset rotted?
Posted by "John D. Hardin" <jh...@impsec.org>.
On Wed, 29 Aug 2007, Doc Schneider wrote:
> John,
>
> I'm pretty much the maintainer of all the old rules for SARE.
>
> I think most of the 419 rules should be pretty much now in SA 3.2.x they
> are called ADVANCED_FEE* and something like NIGERIAN_419* or something
> like that.
What about people who haven't migrated from 3.1.x to 3.2.x yet?
> I'll see if I can ping Matt on our SARE list.
Thanks.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Windows Vista: Windows ME for the XP generation.
-----------------------------------------------------------------------
21 days until Talk Like a Pirate day
Re: SARE fraud ruleset rotted?
Posted by Doc Schneider <ma...@maddoc.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
John D. Hardin wrote:
> SARE ninjas lurking about:
>
> I tried to send the following to Matt Yackley via
> fraud@rulesemporium.com, but that address bounced. Is Matt (or anyone
> else) still maintaining the SARE fraud rulesets?
>
> Matt:
>
> I'm getting a lot of 419 spams that aren't hitting fraud rules in
> 99_sare_fraud_post25x.cf at all. I note that the ruleset has
> apparently not been touched since 2004 - is it abandoned and no longer
> relevant for 3.1.x?
>
> Thanks!
>
> --
> John Hardin KA7OHZ http://www.impsec.org/~jhardin/
> jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
> Vista: because the audio experience is *far* more important than
> network throughput.
> -----------------------------------------------------------------------
> 21 days until Talk Like a Pirate day
>
John,
I'm pretty much the maintainer of all the old rules for SARE.
I think most of the 419 rules should be pretty much now in SA 3.2.x they
are called ADVANCED_FEE* and something like NIGERIAN_419* or something
like that.
I'll see if I can ping Matt on our SARE list.
- --
-Doc
Penguins: Do it on the ice.
8:44am up 4 days, 16:55, 17 users, load average: 0.18, 0.30, 0.37
SARE HQ http://www.rulesemporium.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org
iD8DBQFG1eN9qOEeBwEpgcsRAgpbAJwNBHfSni+qgSSQCZhBtxrSqSAm4gCfSTmF
S46V9o8D6rYgbB6b1TP281M=
=l93X
-----END PGP SIGNATURE-----