On Mon, 19 Feb 2018, Alex wrote:


On Mon, Feb 19, 2018 at 3:20 PM, John Hardin <jhar...@impsec.org> wrote:
On Mon, 19 Feb 2018, Rupert Gallagher wrote:

Whatever you do, just do not ask others to blacklist Alibaba

Are those getting hits on SPOOFED_FREEM_REPTO_CHN?

Perhaps just bump the score for that locally?

KAM's rules are still setting FORGED_YAHOO_RCVD to zero, invalidating
that rule for me. Perhaps he doesn't know the rule was removed or
otherwise handled?

Feb 19 17:37:29 mail01 amavis[30049]: SA info: rules: meta test
SPOOFED_FREEM_REPTO_CHN has dependency 'FORGED_YAHOO_RCVD' with a zero

Is there anything further that needs to be done wrt this rule, or does
it now just work as expected?

He's also got KAM_GRABBAG5 and KAM_UAH_YAHOOGROUP_SENDER also being
affecting by FORGED_YAHOO_RCVD.

Kevin, can that be set to advisory rather than completely killed?

 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
  The question of whether people should be allowed to harm themselves
  is simple. They *must*.                           -- Charles Murray
 63 more days working to pay your (average) annual US tax bill
 before you're finally working for yourself.

Reply via email to