We aren't very active in creating rules for SA, but one typical case that is repeatably being missed, and seems to be a common Spam method, is we are getting consistantly more Spam originating from HotMail servers, with no 'To:' header. This seems to be an interesting rule to test against.
FROM_HOTMAIL_NO_TO Anyone have the ability to quickly test out the effectiveness of that rule? -- "Catch the Magic of Linux..." -------------------------------------------------------- Michael Peddemors - Senior Systems Developer LinuxAdministration - Internet Services NetworkServices - Programming - Security Wizard IT Services http://www.wizard.ca Linux Support Specialist - http://www.linuxmagic.com LinuxMagic is a Registered TradeMark of Wizard Tower TechnoServices Ltd. -------------------------------------------------------- (604)589-0037 Beautiful British Columbia, Canada This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company.
