Those rules are not supposed to be hit in error. They are generally
phish rules that must override any white listing that is done.
{^_^}
----- Original Message ----- 
From: "Rainer Sokoll" <[EMAIL PROTECTED]>

> Hi,
> 
> in 70_sare_spoof.cf some scores are set to 104.
> So a hit in error would mark the mail as a FP. From my understanding,
> the idea SA uses is to have multiple rules with quite low scores each,
> but when they sum up, the mail get a high score. If a rule matches in
> error, there is still a good chance to get a correct rating.
> What is the reason to set such high scores? (I know how to lower them)
> 
> Rainer

Reply via email to