Re: docusign fraud using docusign

>> I would just score anything DNSWL at 0. I mean no disrespect to the
>> maintainer of DNSWL but I just don't find it useful these days. Spam is too
>> complex now.
>>
>>
>> local.cf:
>>
>> score ALL_TRUSTED 0

On 10.11.24 09:55, Alex wrote:
>Isn't this the local trusted servers?

Yes, it is. If it appears in spam, it may be a sign of misconfigured local 
(or remote) system. It makes rarely sense to disable this rule.

>> score USER_IN_WELCOMELIST 0

>The problem I see with this one is that the reason why users would be in
>the welcomelist is because of a failure of other rules.

This rule should only hit when user manually puts someone into welcomelist, 
which it either user error that whould be fixed, or this rule hitting is 
wanted effect.

>Certainly never
>advisable to add end-users to the list, but what else do you do when bayes
>has gone askew (because bayes makes mistakes) and people aren't getting
>their newsletters that are otherwise trusted, or a machine-generated
>invoice is tagged for having missing or malformed headers that would
>otherwise be blocked?
>
>Another problem with offsetting these rules is it doesn't take into account
>the KAM rules that generally have very high scores with the intention of
>having these scores to offset his heavy handed approach.

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Eagles may soar, but weasels don't get sucked into jet engines.