I use these settings fior BCC:
BCC-5 bcc 5 x 15 0
BCC-10 bcc 10 x 10 0

subject tag at 100, hold at 200, delete at 300.

March (BCC5 7177 spam, 268 ham)
March (BCC5 2418 spam, 87 ham)

Since the overwhelming majority of my foreign BCC's are spam (this April 2219/2200 are spam), I also have a filter:
COMBO-BADCOUNTRY-BCC filter D:\IMail\Declude\FPFilters\COMBO-BADCOUNTRY-BCC.txt x 0 0


COUNTRY  END IS  US

TESTSFAILED 10 CONTAINS BCC-5
TESTSFAILED 15 CONTAINS BCC-10

So worse case a foreign with >10 of BCC would get the mail half of the way to the subject tag weight

----- Original Message ----- From: "Kami Razvan" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, April 12, 2005 12:33 PM
Subject: RE: [Declude.JunkMail] DYNHELO Test



Darrell..

The BCC test to me is scary if used by itself- I can see it being used as a
combo test but alone with any weight is not something I would use. We have
clients that use their outlook and send 50+ people in a single BCC ..


Emails to boards and volunteer groups in nonprofits and political groups are
quite typical with large BCC.


Just my 2 cents..

Regards,
- Kami

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Tuesday, April 12, 2005 1:12 PM
To: [email protected]
Subject: [Declude.JunkMail] DYNHELO Test

Is anyone using the DYNHELO test in Declude - if so do you have any
information on it?  What specifically is it looking for?  False positive
rate?    I found it in the new global.cfg file, but did not see any
references to it in the manual.

Also, for the BCC test any thoughts on what the sweet spot tends to be - by
default it comes at 10. Has anyone tweaked this?


Darrell
--------------------------------------------------------------------------
Try invURIBL - an advanced URI filtering test that will block more than 85%
of all SPAM with the default configuration? Try it for free
http://www.invariantsystems.com/invuribl/default.htm


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.

Reply via email to