On Tue, 1 Jun 2010, Michael Scheidell wrote: > On 6/1/10 8:18 AM, Sharma, Ashish wrote: > > Michael, > > > > The comments against spam score only tell what will happen if a given email > > reaches a given spam score level. > > > > What I am asking is how had amavis reached on the conclusion that for a > > spam score of '6.9', amavis should start spam evasive action. What is the > > reasoning behind the spam score assumptions. > > > > > its just a default starting point. I doubt to much thought was given > to actual scores, except that they matched (at one time, a long time > ago), SpamAssassin's default scores. > > FYI, SA's mass checks use a score of 5 points now that they score and > assume is spam. > > You need to set these settings to what works in your environment. > > Too low and you get spam. > Too high and you block legit email.
One datapoint: I personally use 4 as the SPAMMY threshold, and we use dcc, razor, p0f, third-party clamav signatures, and a couple of custom rules on top of that. And I still occaisionally get a mail that scores 3.997 or so, which irritates me (to the point that I just changed L_P0F_Linux to be -.01 instead of -.1). Of course, setting it down to 4, it helps that we do the penpal checks, -20 for our smtp authenticated customers, etc. to help reduce false positives (which we get almost no complaints about...the complaints we do get have solutions and the senders typically have general deliverability problems). Bottom line? The values they provide for default are very conservative, and there's no "right" number. Like Michael said, it's very much environment-dependant. Start with the defaults, look at how your mail gets scored, and adjust from there. Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 --- ------------------------------------------------------------------------------ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org
