Rules_du_Jour config file

Anyone have a recommended config file for Rules_Du_Jour when
used with 
Maia? I've seen the posts that only the SARE related
rulesets are 
recommended, but which ones? All?

- Gary

-- 
Edison Information Technologies        www.edisoninfo.com
PO BOX 554                             gary at
edisoninfo.com
Milan, OH  44846-0554                  800.874.7128  
419.499.7040

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Gary MacKay wrote:
> Anyone have a recommended config file for Rules_Du_Jour
when used with 
> Maia? I've seen the posts that only the SARE related
rulesets are 
> recommended, but which ones? All?
>
> - Gary
>
>   
Rulesets are something you need to evaluate on a case by
case basis.  
Some of my clients are able to work with some of the
"higher risk" 
rulesets and not get too many false positives.  Another
client who does 
a bunch of web based retailing cannot use the same rulesets
because they 
would get a bunch of false positives.  The best you can do
is read the 
descriptions of the rulesets.  Most of them explain when you
would or 
would not want to use them.

Darrick

-- 
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.c
om
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Gary,

I'm using all these and haven't really had any problems.

TRUSTED_RULESETS="TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0
SARE_EVILNUMBERS1
RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD SARE_BML
SARE_SPOOF
SARE_BAYES_POISON_NXM SARE_OEM SARE_RANDOM SARE_HEADER
SARE_HTML
SARE_SPECIFIC SARE_OBFU SARE_REDIRECT_POST300 SARE_GENLSUBJ
SARE_HIGHRISK
SARE_UNSUB SARE_URI0 SARE_URI1 SARE_WHITELIST"

I used to use one of the blacklist ones before my server
crashed and as an
after-thought, realized that is was causing a lot of
processing delays due
to the large size of the blacklist ruleset.  Long story
short, don't use
it.

Ryan


> Anyone have a recommended config file for Rules_Du_Jour
when used with
> Maia? I've seen the posts that only the SARE related
rulesets are
> recommended, but which ones? All?
>
> - Gary
>
> --
> Edison Information Technologies       
www.edisoninfo.com
> PO BOX 554                             gary at
edisoninfo.com
> Milan, OH  44846-0554                  800.874.7128  
419.499.7040
>
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
>


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users