Matus UHLAR - fantomas wrote:

> I thought you can reject *or* quarantine,


Wether that "or" is exclusive or not depends on the tools you=20
use. With MIMEDefang (wich we use) it isn't.

Since SpamAssassin has to be called after the complete message=20
has been received, there is no technical reason why you can't=20
both reject and keep the mail.

> Or do you reject spam at SMTP level *and* even keep the copy?


Yes, that's exactly what I do with mail that scores from 9 (incl)=20
to 18 (excl). The reason is pretty simple:

The mail is rejected at SMTP level, so legit senders will be=20
notified.

Most users, however, seem to completely ignore all error=20
messages, or at least make sure to delete them before asking an=20
admin what they meant. Therefore I normally browse quarantine=20
reports every workday, and resend any FP I spot (bypassing the=20
filters).

Regards
/Jonas
--=20
Jonas Eckerman, FSDB & Frukttr=E4det
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/