Matt Kettler said: > At 02:05 PM 10/19/2004, Ronan wrote: >> > (Note: antidrug is built into SA 3.0, so don't add it if you're >> running >> 3.0) >> > >>ok on that last statement - which of the rules from exit0 and >>rulesemporium etc are included in 3.0 by default. >>ronan > > From the SA 3.0 release announcement: > > - Bob Menschel's "longwords" rules were added. > > - The "backhair" rules were added to combat HTML obfuscation, a > technique based on Jennifer Wheeler's "backhair" ruleset. > > - Matt Kettler's "antidrug" rules were added. > > - Anti-fraud rules from Matt Yackley were added.
Ah, that wasn't clear from the sare custom rulesets page - I just upgraded from 2.64 to 3.0.0, and thought I removed the redundant rulesets - so, as a quick sanity check here, for sa-3.0.0, we don't need 99_sare_fraud_post25x.cf, as that ruleset is already in the 3.0.0 distribution? Thanks, e
