spam thresholds?

[mkehler]

What is everyone using for (ironport) anti-spam suspect and positive thresholds? We started at the default of suspect:50 and positive:90... and are slowly knocking it down.. right now its 48/71. Doesn't really seem to be blocking any more spam though, and not really putting any more into suspect either. The fact you can't see the scores is really annoying... it essentially becomes a guessing game.

Anyone using some considerably more aggresive thresholds?

matt

[Mark [CSE]_ironport]

Hi Matt,

So we do see a fair amount of 40/80 thresholds in the field. From my experience I can only say that this does not increase the FP rate much.

Cheers,

Mark

[magnussolberg_ironport]

Hi,

I agree with you, Matt, it basically becomes a guessing game. We've installed (and are managing) some 40-odd boxes now, and found that a score of 55/85 is optimal - but I'm betting this depends heavily on the type of customers you deal with, the general profile of their mailflow, and the geographical location you're set in.

--magnus