> -----Messaggio originale-----
> Da: Duncan Hill [mailto:[EMAIL PROTECTED]
> 
> On Fri, May 18, 2007 14:50, Giampaolo Tomassoni wrote:
> 
> > what's wrong with automatically SA-report messages scoring above a
> given
> > threshold (say, 10-12)?
> >
> > Would it be regarded as *BAD* by DCC, Pyzor, Razor, and/or SC?
> >
> >
> > I often see that high-scoring messages are reported as spam by some
> of
> > the above-mentioned engine, but seldom by all of them.
> 
> Off the top of my head:
> 
> 1) Your server can be used in a DoS against the distributed services

You mean, by sending valid content on high-scoring mails? Mmmh. Yes, this
may create trouble to DCC, Pyzor and Razor. Not to SC, since they are mostly
interested to Received: header lines. Ok.


> 2) False positives get broadcast to the distributed services

I did browse my quarantine to have a check to FPs. Didn't find anything at
score 8... I don't think this would really be an issue, unless "something
goes wrong" and my systems start quarantining good mails, which is a
respectful case.

Ok. I think I could always report to SC. What about reporting to DCC, Pyzor
and Razor iff the message is already reported by one of these engines? That
would probably defeat the DoS case.

Giampaolo

Reply via email to