> So SURBL will work even if no .cf files are on any of the site rules or > config dirs yet? How does SA know about URLs and where to check?
SA comes with a pile of config files as part of the normal install. You should certainly have the default SA config files installed. Whether these are the ones you are referring to on CPAN I can't say. But I think you should find a bunch of cf files probably in etc/mail/spamassassin. The surbl stuff will be in these rule files. > Do you recommend still installing some rules like sare and such? Some of the SARE rules have been subsumed into 3.0, but most haven't. The general rule is, if spam is leaking through, look to see if there is an addon ruleset that can fix the problem. If spam isn't leaking through, generally don't bother. Quite likely the sare general header, general subject, bml, and fraud rules will help, as probably will some of the others. However, surbl does quite a good job all by itself. > Also, do you know any rules that trap vicodin and some other drug spam? Matt's antidrug rules are part of 3.0, so most of this stuff should be caught by default. Loren