RE: [Declude.JunkMail] Filter multiple CCs?

2003-10-29 Thread Hirthe, Alexander
Hello,

 There is a bcc test that you could use.  If you add a line:
  BCC bcc 5 x 2 0

will this add 20 points for 50 Bccs? or can I use
BCC1bcc  5  x2  0
BCC10   bcc 10  x   20  0


Alex 
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Filter multiple CCs?

2003-10-29 Thread R. Scott Perry

 There is a bcc test that you could use.  If you add a line:
  BCC bcc 5 x 2 0
will this add 20 points for 50 Bccs?
No.  It will add 2 points for any E-mail that has 5 or more Bcc:'s.

 or can I use
BCC1bcc 5   x   2   0
BCC10   bcc 10  x   20  0
That would work fine.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Filter multiple CCs?

2003-10-29 Thread paul

 There is a bcc test that you could use.  If you add a line:

  BCC bcc 5 x 2 0

 to your \IMail\Declude\global.cfg file, it will add 2 points to the weight
 of the E-mail if it has 5 or more Bcc:'s (recipients that do not appear in
 the headers of the E-mail).

Wow, when was that test added? I must've missed that. nice test to add I
think.

On that note, what do people consider 'too many' in BCC?

Paul


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Filter multiple CCs?

2003-10-29 Thread Matthew Bramble




I currently score it as follows (on a fail weight of 10)

 BCC-3   bcc  3 x 1 0
 BCC-5   bcc  5 x 1 0

I used to have a line in there for just one BCC, but I removed that
because adding points with that was just too common and
indiscriminate. Obviously I score this very low, but the scoring is
also incremental, so 5 BCC's will fail both tests. Honestly, I haven't
looked too carefully at what is optimal with this, but it might be a
good idea to set up a filter for 3 or more BCC's and see what spam
doesn't fail, and also what sort of problems the legit messages that
fail this test might have in addition (could they pretty much all
handle having the extra points for instance).

Matt



paul wrote:

  
There is a "bcc" test that you could use.  If you add a line:

 BCC bcc 5 x 2 0

to your \IMail\Declude\global.cfg file, it will add 2 points to the weight
of the E-mail if it has 5 or more Bcc:'s (recipients that do not appear in
the headers of the E-mail).

  
  
Wow, when was that test added? I must've missed that. nice test to add I
think.

On that note, what do people consider 'too many' in BCC?

Paul
  





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Filter multiple CCs?

2003-10-29 Thread Robert Grosshandler
Title: Message



If an 
e-mail is sent to me, BCC'd to 5 other people in my domain, and BCC'd to 100 
other people not in my domain, what number does BCC see?

5 or 
100?

Thanks.

Rob