On Tue, Apr 17, 2007 at 02:34:35PM -0600, Vernon Schryver wrote: > > From: Kelsey Cummings > > > It's really just these two specific cases too. AVG signatures and > > Outlook/OE read receipts, nothing else causes any trouble. > > What do those two cases look like? > > I don't understand how their checksums can vary, but still hit DCC bulk > thresholds. If they are all the same, then a single FUZ2 line in > /var/dcc/whiteclent should whitelist time. If they all differ, then > then should not look like bulk mail.
It's more an issue that they change periodically when the software is upgraded or patched - or something - triggering a rash of FPs until we figure it out and whitelist the new hashes. I'll see if I can dig up some examples and get them over to you. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407 _______________________________________________ DCC mailing list [email protected] http://www.rhyolite.com/mailman/listinfo/dcc
