on 4/25/02 11:40 AM, R. Scott Perry wrote: > Looking at our spamtraps, it looks like only a small > portion (perhaps 5% to 10%) of the spam is sent with the multiple addresses > in the To:/Cc: headers. Making it less useful is that often they are > similar-but-not-exact names -- such as "john123@", "john128@", "johnny@", > ... which would either minimize the usefulness of the feature, or require > somewhat sophisticated testing to determine if the addresses were similar > (which could result in too many false positives if not done well).
I think you shouldn't worry about the similar-but-not-exact names case, only the exact names case. If all the addresses are the same name (and there is 3 or more) then I think it would have to be a spam message (unless someone can think of a case where that wouldn't be true). Thanks, Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
