Those rules are not supposed to be hit in error. They are generally phish rules that must override any white listing that is done. {^_^} ----- Original Message ----- From: "Rainer Sokoll" <[EMAIL PROTECTED]>
> Hi, > > in 70_sare_spoof.cf some scores are set to 104. > So a hit in error would mark the mail as a FP. From my understanding, > the idea SA uses is to have multiple rules with quite low scores each, > but when they sum up, the mail get a high score. If a rule matches in > error, there is still a good chance to get a correct rating. > What is the reason to set such high scores? (I know how to lower them) > > Rainer