Matus UHLAR - fantomas wrote:
I thought you can reject *or* quarantine,
Wether that "or" is exclusive or not depends on the tools you use. With MIMEDefang (wich we use) it isn't.
Since SpamAssassin has to be called after the complete message has been received, there is no technical reason why you can't both reject and keep the mail.
Or do you reject spam at SMTP level *and* even keep the copy?
Yes, that's exactly what I do with mail that scores from 9 (incl) to 18 (excl). The reason is pretty simple:
The mail is rejected at SMTP level, so legit senders will be notified.
Most users, however, seem to completely ignore all error messages, or at least make sure to delete them before asking an admin what they meant. Therefore I normally browse quarantine reports every workday, and resend any FP I spot (bypassing the filters).
Regards /Jonas -- Jonas Eckerman, FSDB & Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/
