> Aaron Bennett wrote: > > production environment -- do you see them working with the default > > scores, or have you tweaked them at all?
On 14.05.08 12:04, Matt Garretson wrote: > I've set up a meta rule which adds more to the score if either > ANY_BOUNCE_MESSAGE or VBOUNCE_MESSAGE hit. pardon? the ANY_BOUNCE_MESSAGE is a meta rule, which matches if any of CRBOUNCE, BOUNCE or VBOUNCE matches. just tuning them should be enough. > I also have custom rules that try to decrease the score if it looks like a > legit bounce, based on local criteria. may I know what kind of local criteria that is? > This is on top of the checking VBounce does. Presently this setup catches > a good portion of the backscatter, without appreciable FPs. -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Chernobyl was an Windows 95 beta test site.
