SARE's header rule sets have been updated. All rules have been renamed and redescribed as necessary to prevent --lint warnings under version 3.0.0
Rules that duplicate rules added to the 2.64 and/or 3.0.0 distribution rule set have been moved to separate files. Rules that work well for English-based systems, but that might cause false positives have been moved to a separate file. Rules that used to work well but no longer hit spam have been archived. Header rules from ratware.cf have been merged into this collection. The SARE_HEAD_SPAM regex has been split into a multitude of exists:header rules. There are eight ruleset files in this collection (nine, counting the archive): 70_sare_header0.cf contains those header rules which in all SARE mass-check testing hit ONLY spam. This is the safest of the four header rulesets for use. Unlike 70_sare_header0.cf, the 70_sare_header1.cf ruleset contains rules which do (or in the past have) hit ham during SARE mass-check tests. The S/O calculated by SA's hit-frequencies scripts are all at or above 0.900. This file also contains rules which hit only spam, but fewer than 10 spam in our mass-check tests. Systems which are highly sensitive to false positives and/or tight on resources may want to exclude this ruleset, pick and choose among its rules, or lower their scores. Any system using this file 1 should also use file 0. 70_sare_header2.cf contains only rules which should never hit ham, but that do not currently hit any emails during SARE mass-check testing against current corpora. Therefore, systems which are very sensitive to SpamAssassin overhead may want to exclude this ruleset to avoid its regex overhead. 70_sare_header3.cf contains a subset of header rules which hit a significant amount of ham during SARE mass-check tests. Systems which are very sensitive to false positives should probably NOT install this ruleset. 70_sare_header_eng.cf contains header rules which work well where English is the only expected language, but that may cause false positives in systems which receive a significant number of emails in other languages. 70_sare_header_x264_x30.cf contains header rules which have been merged into the SpamAssassin distribution rule set in version 2.64. These rules are also part of the distribution rule set in version 3.0.0. Systems which have upgraded to either of these two versions should not use this file. Systems running any 2.5x or 2.60 through 2.63 version should benefit from these rules. 70_sare_header_x30.cf contains header rules which have been merged into the SpamAssassin distribution rule set in version 3.0.0. Systems which have upgraded to this version should not use this file. Systems running any 2.5x or 2.6x version should benefit from these rules. 70_sare_header_arc.cf contains header rules which used to work, but which no longer hit spam, or that hit too many ham. SARE will continue testing these rules and will reactivate any that again become productive. This rules file should be used only by the most aggressive systems with available resources. As announced two months ago, the old header_abuse.cf rule set file has now been deleted. Bob Menschel
