Check the SARE page for the various rulesets to see if any have been
depreciated for 3.0. I don't believe any of the ones you have listed have
been, but it is worht a check.
That said: you have some ANCIENT rulesets there that have been updated
several times and have new names. I don't believe that we have any rulesets
now with numbers above 70.
Also, you show header0 and gensubj0. Almost always you would also want the
"1" version of these rulesets. The "0" version mostly just sets up stuff
used by the other sets, I believe.
> 70_SARE_Adult.cf.bak
> 70_SARE_Genlsubj0.cf.bak
> 70_SARE_Header0.cf.bak
> 70_SARE_Random.cf.bak
> 70_SARE_SPOOF.cf.bak
> 71_SARE_Redirect_pre3.cf.bak
> 72_SARE_BML.cf.bak
> 99_FVGT_Tripwire.cf.bak
> 99_OBFU_drugs.cf.bak
> 99_SARE_Fraud.cf.bak
> 99_SARE_OEM.cf
Antidrug is in 3.0
> * antidrug.cf.bak
> backhair.cf.bak
Dump bigevil! Turn on the net rules instead.
> * bigevil.cf.bak
> bogus-virus-warnings.cf.bak
> * chickenpox.cf.bak
Evilnumbers can be useful if you don't have net rules running, but the net
tests will generally do better.
> evilnumbers.cf.bak
Some of the ratware stuff is probably in 3.0. Also, there is some in SARE
rulesets, such as Random and Specific.
I think (though I'm not positive) that random and useless are old
depreciated rulesets.
> ratware.cf.bak
> useless.cf.bak
> weeds.cf.bak
Backhair, bogus-virus-warnings (which may have been updated since your
version), chickenpox, tripwire, and weeds can all still be useful rulesets,
even they haven't been updated in ages.
Loren
