Hi, in 70_sare_spoof.cf some scores are set to 104. So a hit in error would mark the mail as a FP. From my understanding, the idea SA uses is to have multiple rules with quite low scores each, but when they sum up, the mail get a high score. If a rule matches in error, there is still a good chance to get a correct rating. What is the reason to set such high scores? (I know how to lower them)
Rainer
