On Fri, Apr 11, 2008 at 09:13:09PM +1200, Jason Haar wrote: > > ...and the score is 0.1 - and I don't fiddle with SA scores as a rule > 'cause you guys > Know Best (TM).
No, the guys can't know what the best scores are for _your_ system. Therefore if you want efficient SA, you need to modify many scores, possibly running mass-checks for your traffic.