yes, somehow the sender was in spamcop rbl, and the nightly sa-update keeps up to date with 72_active.cf rule..
but, maybe a score of 5.3 is pretty high for ONE rule?

(

KHOP_SC_TOP200 is 3.9.  but since its in the spamcop database, you add 1.34. 
total of 5.3.  )
score KHOP_SC_TOP200                        3.999 3.999 3.999 3.999

shouldn't a minor tweak on the score be something that takes into account 
'network tests' ?

something like

score KHOP_SC_TOP200                        3.999 2.65 3.999 2.65


--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation

   * Certified SNORT Integrator
   * 2008-9 Hot Company Award Winner, World Executive Alliance
   * Five-Star Partner Program 2009, VARBusiness
   * Best Anti-Spam Product 2008, Network Products Guide
   * King of Spam Filters, SC Magazine 2008

______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ ______________________________________________________________________

Reply via email to