Return-Path: Delivered-To: apmail-spamassassin-users-archive@www.apache.org Received: (qmail 11548 invoked from network); 3 Jul 2007 21:10:28 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 3 Jul 2007 21:10:28 -0000 Received: (qmail 51266 invoked by uid 500); 3 Jul 2007 21:10:12 -0000 Delivered-To: apmail-spamassassin-users-archive@spamassassin.apache.org Received: (qmail 51252 invoked by uid 500); 3 Jul 2007 21:10:12 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 51205 invoked by uid 99); 3 Jul 2007 21:10:10 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 03 Jul 2007 14:10:10 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of raymond@prolocation.net designates 81.23.230.64 as permitted sender) Received: from [81.23.230.64] (HELO control.prolocation.net) (81.23.230.64) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 03 Jul 2007 14:10:07 -0700 Received: from control.prolocation.net (localhost.localdomain [127.0.0.1]) by control.prolocation.net (8.13.1/8.13.1) with ESMTP id l63L9ns9029521; Tue, 3 Jul 2007 23:09:49 +0200 Received: from localhost (raymond@localhost) by control.prolocation.net (8.13.1/8.13.1/Submit) with ESMTP id l63L9msv029513; Tue, 3 Jul 2007 23:09:49 +0200 X-Authentication-Warning: control.prolocation.net: raymond owned process doing -bs Date: Tue, 3 Jul 2007 23:09:48 +0200 (CEST) From: Raymond Dijkxhoorn To: Jason Haar cc: users@spamassassin.apache.org Subject: Re: So what about rulesemporium.com and these anti-PDF rules? In-Reply-To: <468AA874.4010807@trimble.co.nz> Message-ID: References: <468A7AB5.3040609@uribl.com> <20070703164949.GB5264@kluge.net> <468AA874.4010807@trimble.co.nz> X-NCC-RegID: nl.iptower MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Checked: Checked by ClamAV on apache.org Hi! >> All in all, you're better off just making things public. > model in the antivirus/antispam arena... > > ...and it may be true - but no-one on this list believes it ;-) Its a matter of fact that published rules (see sare rulesets) become less effective immediate after publishing. That due to spammers reading along ect ect. I can understand Dallas point and dont agree that making this open will give the same results.... It should, but it just doesnt. We have rules very ok hitting, and i know once we put this in a SARE set the effeciveness will drop and we have to come up with new rules. Not really something people look forward to. Its just a handfull people contributing as you know. Bye, Raymond.