On 1-Jul-2009, at 06:47, rich...@buzzhost.co.uk wrote:
But for the paranoid will changing 50_scores.cf from; score RCVD_IN_SORBS_BLOCK 0 # n=1 n=2 n=3 score RCVD_IN_SORBS_DUL 0 1.615 0 0.877 # n=0 n=2 score RCVD_IN_SORBS_HTTP 0 0.001 0 0.001 # n=0 n=2 score RCVD_IN_SORBS_MISC 0 0.001 0 0.353 # n=0 n=2 score RCVD_IN_SORBS_SMTP 0 # n=0 n=1 n=2 n=3 score RCVD_IN_SORBS_SOCKS 0 0.182 0 0.801 # n=0 n=2 score RCVD_IN_SORBS_WEB 0 1.117 0 0.619 # n=0 n=2 score RCVD_IN_SORBS_ZOMBIE 0 # n=0 n=1 n=2 n=3 TO score RCVD_IN_SORBS_BLOCK 0 score RCVD_IN_SORBS_DUL 0 score RCVD_IN_SORBS_HTTP 0 score RCVD_IN_SORBS_MISC 0 score RCVD_IN_SORBS_SMTP 0 score RCVD_IN_SORBS_SOCKS 0 score RCVD_IN_SORBS_WEB 0 score RCVD_IN_SORBS_ZOMBIE 0 Stop the 'cost' of the lookup?
DO NOT EDIT 5-_Scores.cf. Don't do it. No, not even if you're 100% positive you want to.
If you want to change the scores, put them in local.cf, where all other config changes go. Or, put them in some other .cf file in the same folder as local.cf. Maybe sorbs0.cf would be a good name.
DO NOT edit the default files of SA. Ever. -- The early bird gets the worm, but the second mouse gets the cheese.