Karsten Bräckelmann wrote: > > Seriously, feedback? Thoughts, comments? > > What I'm most interested in at this point is feedback on code (and > comments), and of course the POD, settings in general, features or > understandability. Opinions, thoughts, human review. Not necessarily > statistics just yet. > > Anything to share?
As no-one else has commented yet - I thought I'd start the ball rolling. I've had it running on a production box for the last couple of days and have been capturing any messages that hit the HAS_ANY_OBFU_URI rule. This box *was* getting loads of obfu'd URI messages (I capture messages from certain ISP dynamic ranges that have massive bot infestations in my MTA and feed them to Bayes automatically); but when I checked the traps over the weekend - I didn't see a single message containing obfu's URIs. So it appears that that this particular campaign has gone quiet for the time being. However I did have a few obfu messages saved and running them through GUDO with the example settings from the perldoc captured them nicely. The documentation is straightforward and relatively easy to understand given the subject matter being quite complex and the example settings appear to work well. All in all - I'd say it works great. Kind regards, Steve.
