Understanding cutoff-dsn

[Michael Scheidell]

On 8/26/11 4:57 AM, Lars Jørgensen wrote:
>
> $sa_dsn_cutoff_level = 6.3;
> $sa_crediblefrom_dsn_cutoff_level = 18;
>
> I understand the first one, but what does the second one do? About 
> half my daily ndrs have scores higher than 6.3, and I suspect that is 
> because of the "crediblefrom".
if a spam scores < 6.3, the sender gets a 'bounce' (you might be a 
spammer if....)
if it also has valid spf or dkim, and its under 18, the sender also gets 
a bounce.

so, forged spammers < 6.3 will create backscatter.
spammers who spam from valid accounts will get bounces till it scores 18.


-- 
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
 >*| *SECNAP Network Security Corporation

    * Best Mobile Solutions Product of 2011
    * Best Intrusion Prevention Product
    * Hot Company Finalist 2011
    * Best Email Security Product
    * Certified SNORT Integrator


______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20110826/5cfb76bf/attachment.html>