Party pooper. ;) Actually, I would have never thought of a reason for it to be in the header, since by nature it is not supposed to be known.
I have seen it in spam though. John T eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew > Sent: Wednesday, December 21, 2005 10:36 AM > To: [email protected] > Subject: RE: [Declude.JunkMail] BCC in header > > I've definitely seen a BCC: header entry on legitimate mail, which is > then blank. > > I think the big idea is that the sender MTA thought it was a good idea > to let the receiver know that a BCC was used. > > Sorry, I can't remember the software or domain involved. > > I'd suggest at least creating a new JunkMail Pro filter with > > HEADERS 0 CONTAINS BCC: > > And then set a copyfile action and running that for a while to check for > false positives before you decide to add weight. > > Andrew 8) > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of John > > T (Lists) > > Sent: Wednesday, December 21, 2005 10:17 AM > > To: [email protected] > > Subject: [Declude.JunkMail] BCC in header > > > > Since a BCC line from a legit client will never appear in the > > header, it makes sense then that we can filter on BCC: in the > > header and penalize a good amount, correct? > > > > John T > > eServices For You > > > > > > > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be > > found at http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
