-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Bill McGonigle wrote:

> I've seen plenty of spam hit the RCVD_ILLEGAL_IP rule and just recently
> noticed that the default score is only 0.23.
>
> My first impression is that if they're sending from an unassigned
> address then I ought to just crank the score to 5 and be done with it.


I've seen RCVD_IN_ILLEGAL_IP (or whatever it's exactly called) in a
number of false positives -- especially Windows shops seem keen on
inventing internal IP ranges.

- -- Matthias

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFGj+IHxbHw2nyi/okRAg9xAJ0TkYWWG19PjB/jGAkuHcTrcpkzewCgxfol
wMvtUxUgVWhuWsoBZCn9Ktk=
=FLqL
-----END PGP SIGNATURE-----