On 3/25/10 12:08 PM, Charles Gregory wrote:
Hallo!
Follow-up on SA 3.3.1 upgrade yesterday....
My system changes log reported the addition of several files
named .razor/... which brought to my attentino that 'RAZOR2' tests
are now enabled by default in SA 3.3.1 ....
A long time ago, in a galaxy far away, razor was (asked? forced?) to
restrict razor, so SA rightly pulled it from defaults.
Now (as of version 2.8.2? I think), the license restrictions were rescinded.
razor does a good job, doesn't take much cpu, and, yes, does catch lots
of spam, with little FP's.
just check the logs, and every week or so, doublecheck servers.
(you using the freebsd SA port?)
Is there anything that I should be concerned about? It seems to be
functioning well, and I like the stats for the rules on rulesqa.... :)
- Charles
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________