Very early on, I noticed that the "bomb" functionality was likely to reject legitimate mail. I changed the default action from 'block' to 'score', so that wouldn't happen.
I prefer to not have a single point of failure that blocks messages. Most spam has multiple issues when it comes to validation checks, so reviewing the logs and tweaking the scores has gone a long way towards eliminating false-positives while still blocking 99.9% of the spam to a domain that receives between 70,000 and 100,000 messages a day. - Phil ------------------------------ Message: 4 Date: Wed, 18 Aug 2010 15:28:40 +0100 From: Shane Killian <[email protected]> Subject: [Assp-user] False Positives To: "[email protected]" <[email protected]> Message-ID: <a9885771cb11af44a2a058ee6ba819e401c80efe8...@topcat.dub.irishjobs.ie> Content-Type: text/plain; charset="us-ascii" Hi guys, I'm having issues where some mail is being rejected because of keywords e.g: "Aug-18-10 14:36:46 38601-11437 [bombRe] 194.106.137.59 <[email protected]> to: [email protected] [spam found] -- bombRe: '12% discount , 10% discount' -- [RE contract] -> discarded/11437.eml;" The problem here is that this is a genuine mail sent to a salesperson. The sales person at my company had been emailing [email protected]<mailto:[email protected]> but I think the mail is not being processed correctly. I never see mail from Exchange server that is going to my MTA via ASSP showing as [local] Thanks, Shane ------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
