> On Wednesday 13 April 2005 09:57 am, Eugene Kurmanin wrote: >> 5. Copy SPAM to the defined mailbox; >> 6. Reject SPAM at the DATA stage, >> if SPAM score is greater than defined value; >> 7. Log all activities to syslog.
> Well if you are going to reject, why also accept > and copy to mailbox. You can set the smf-spamd EXTRA SPAM threshold (8 is default) to reject message without copying and delivering to user mailbox. If SPAM score after SA scan will be more or equal required_score from SA configuration file and less than EXTRA SPAM threshold, message will be marked in Subject and if you wish, it will be copied (BCCed) to special "garbage" mailbox for analize and correction SA config. Of course, you can set extra spam threshold = required_score and don't copying anything... but you are lost many legitimate mail, if you set required_score very low :) > Is there more than one threshold, so that you can > reject if it gets a really bad score (like 20 or 30) and > reject but still copy to mailbox if the score is less? I found that legitimate mail may get score up to 7-8... If more scores, it's always spam. I used on one of my production server SA 3.0.2 with network mode + DCC, without buyes & whitelist databases + some tuning for scores values. required_scores set to 4 extra spam to 8 SA works stable and quickly and don't eat many resources and memory. My 1500 users quite lucky ;) -- Kind regards, Eugene Kurmanin
