On Saturday, May 29, 2004, 11:31:15 AM, Max Kipness wrote: > Jeff C wrote: >> You would create separate rules and scores for each. There >> are some SA 2.63 and 3.0 examples on the quickstart page at:
> Ok, I created three rules, and named them, SPAMCOP_URI_RBL_SC, > SPAMCOP_URI_RBL_BE, and SPAMCOP_URI_RBL_WS. > I've notice some messages are getting tagged by all three, giving a > total of 9 between them all. > Does this seem like overkill? Is it advisable to use all three this way? It's good to use all three lists because a given spam URI domain may only appear on one list. Often that seems the case. When a domain appears on more than one list, it's perhaps safe to assume it's really spammy and therefore ok to score higher. :-) YMMV. By the way, only the sc.surbl.org data is actually derived from SpamCop, so I usually give the rules using the other lists a different name like WS_URI_RBL and BE_URI_RBL, or something similar. Cheers, Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
