Aaron Bennett wrote: > production environment -- do you see them working with the default > scores, or have you tweaked them at all?
I've set up a meta rule which adds more to the score if either ANY_BOUNCE_MESSAGE or VBOUNCE_MESSAGE hit. I also have custom rules that try to decrease the score if it looks like a legit bounce, based on local criteria. This is on top of the checking VBounce does. Presently this setup catches a good portion of the backscatter, without appreciable FPs.
