On Thu, 2009-04-02 at 11:51 +1300, Aran wrote:
> We use the most recent version and keep it up to date.
That's not a version. I've seen that refer to a years old release...
> You say there's a very long list of practices and that the list is way
> too long - well where is this list? why is it so hard to configure?
That list would be in my (well, our collectives ;) head. There's not a
single way how to integrate SA, how to run SA, and there's no single
demand. So there's no single "do this to be happy".
More seriously, what I really said is, that failing to follow best
practices hardly is the reason for 80% of your spam in-stream slipping
through. Your problem is something else.
Frankly, a vanilla SA install will perform better.
IMHO even a vanilla SA, no best-practices tweaking whatsoever, with 80%
spam caught indicates a severely broken setup. Let alone all of a sudden
going down to 20%, with 80% FNs. See why I told you that's not your
problem?
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
