I've definitely seen a BCC: header entry on legitimate mail, which is then blank.
I think the big idea is that the sender MTA thought it was a good idea to let the receiver know that a BCC was used. Sorry, I can't remember the software or domain involved. I'd suggest at least creating a new JunkMail Pro filter with HEADERS 0 CONTAINS BCC: And then set a copyfile action and running that for a while to check for false positives before you decide to add weight. Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of John > T (Lists) > Sent: Wednesday, December 21, 2005 10:17 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] BCC in header > > Since a BCC line from a legit client will never appear in the > header, it makes sense then that we can filter on BCC: in the > header and penalize a good amount, correct? > > John T > eServices For You > > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
