David Norelid wrote: > Could someone who has had very good results with Single Message Scoring > Mode provide some tips in terms of what scored they use, the tests they > use for scoring instead of blocking, and anything else relevant?
here we go (all tests are run in scoring mode): penalty box: 2 single message mode: x low threshold: 40 high threshold: 50 scoring interval: 120 threshold: 100 expiration time: 1440 extreme threshold: 125 expiration time for extreme penalties: 3 expiration time for white box entries: 90 use exported extreme file for smtp denying: x do not penaltize bounced mails: x bad attachement: 45 bayesian: 45 blackre expression: 5 blacklisted domain: 50 bomb expression: 50 empty recipients: 5 forged helo: 25 forged local sender: 45 blacklisted helo: 15 internal only adress: 25 ip subnet changing per domain: 45 connection per ip frequency limit: 10 invalid helo: 15 parallel sessions per ip limit: 10 invalid recipient: 45 max errors exceeded: 15 missing mx/a record: 10 missing/invalid ptr record: 30 dnsbl neutral: 30 dnsbl failed: 45 failed relay attempt: 45 spam collect adress: 45 script expression: 45 spf neutral: 0 spf softfailed: 10 spf failed: 45 penalty trap address: 25 uribl neutral: 30 uribl failed: 45 max uris exceeded: 10 uri obfuscated: 10 virus detected: 15 -- View this message in context: http://www.nabble.com/40%2B-Spam-passed-ASSP-today%21-tf4120977.html#a11738539 Sent from the assp-user mailing list archive at Nabble.com. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
