R Lists06 wrote: > Greetings > > I pulled down a large subset of all the sare filters today on a test > mail server... > > 70_sare_adult.cf > 70_sare_bayes_poison_nxm.cf > 70_sare_evilnum0.cf > 70_sare_genlsubj0.cf > 70_sare_header0.cf > 70_sare_html0.cf > 70_sare_obfu0.cf > 70_sare_oem.cf > 70_sare_random.cf > 70_sare_specific.cf > 70_sare_spoof.cf > 70_sare_stocks.cf > 70_sare_unsub.cf > 70_sare_uri0.cf > 72_sare_bml_post25x.cf > 72_sare_redirect_post3.0.0.cf > 99_sare_fraud_post25x.cf > > I didn't snag all of them. > > Im still contemplating the one that says it needs network tests on > and spf on and something else. > > For those of you that use these, can you rate them on how effective in > general? > > Ummmmm I do not think I want to run them all and so i am looking for > help to trim it to the top 3 to 5 "or so" of them to use... > > It appears that several of you run all of them... > > Any helpful comments will be appreciated. > > Thanks and kind regards,
The most effective SARE rulesets for me are: 70_sare_stocks.cf 70_sare_adult.cf 70_sare_specific.cf In general, the best rules on my system are: Bayes Razor URIBL DCC SURBL SARE_STOCKS SARE_ADULT SARE_SPECIFIC FUZZYOCR is also quite useful. It doesn't get as many hits as some of the others, but it hits on the image spams that the other rulesets frequently miss. -- Bowie
