On Sun, 4 Apr 2021 13:21:08 +0200 Matus UHLAR - fantomas wrote:
> On 04.04.21 13:09, Benny Pedersen wrote: > >change score to 7.5 > >change score to -3.5 > > I prefer to solve problems instead of playing with scores. > > It seems that abusers have worked around SA by using google domains > and addresses for sending spam from. If google have been foolish enough to allow abuse on the organizational domain it should definitely be taken out of the def whitelists until they move anything abusable to a different subdomain/domain. However, the point about scores is a valid one in this case. For the 'def' whitelists to have any point they should be tuned to prevent most such FPs while having a minimal impact on TPs. The rules are scored far too strongly, but the fact they are additively scored makes it impossible to fine tune them. There's no point in additive scoring anyway. If any of them is hit it's most likely the spam has gone through an abused server.