Matus UHLAR - fantomas wrote:

> I thought you can reject *or* quarantine,

Wether that "or" is exclusive or not depends on the tools you=20
use. With MIMEDefang (wich we use) it isn't.

Since SpamAssassin has to be called after the complete message=20
has been received, there is no technical reason why you can't=20
both reject and keep the mail.

> Or do you reject spam at SMTP level *and* even keep the copy?

Yes, that's exactly what I do with mail that scores from 9 (incl)=20
to 18 (excl). The reason is pretty simple:

The mail is rejected at SMTP level, so legit senders will be=20

Most users, however, seem to completely ignore all error=20
messages, or at least make sure to delete them before asking an=20
admin what they meant. Therefore I normally browse quarantine=20
reports every workday, and resend any FP I spot (bypassing the=20

Jonas Eckerman, FSDB & Frukttr=E4det