[Mimedefang] I give up on blocking this one

[David Prestwich]

That site and the CMOScript both did the trick for me. Sorry that I 
didn't read the SA Talk change. My Bad!

/David



Brent J. Nordquist wrote:

>
>There's Matt Ketler's antidrug.cf ruleset for SA you could try; it is in
>development and not super comprehensive yet, but catches some of mine:
>
>http://mywebpages.comcast.net/mkettler/sa/antidrug.cf
>
>Like David said, you can use that web-based tool to produce SA rules that
>will catch every kind of obfuscation under the sun for a given input
>string.  But have you seen the output?  I've been wondering about the
>performance hit I'd take for just a few of the common drugs.
>
>  
>