All:

Any objection to promoting __CT_ENCRYPTED and ENCRYPTED_MESSAGE out of the sandbox to permanent rules, and giving ENCRYPTED_MESSAGE a negative (nice) score (say, -1)?

I think that's fairly safe to do, as I doubt a spammer would impose the overhead of decryption on their victims, and I'm not sure exactly how well sandbox+masscheck works for "nice" rules.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  A government is a lot like a gun: It's always loaded,
  and it's stupid and dangerous to point it at anything
  you don't intend to hurt.                             -- GOF at TSM
-----------------------------------------------------------------------
 Tomorrow: Bill of Rights day

Reply via email to