Hi:

I hold at 10:

BCC4            bcc             4       x       2       0
BCC6            bcc             6       x       2       0
BCC8            bcc             8       x       2       0

I whitelist SMTP AUTH.

So - based on this, I'm really only effecting INCOMING emails where an
outside is sending email to 4 or more people at the same company AND is NOT
doing it openly (using CC:), but doing it "hidden" (using BCC).  Contrary to
other comments, I have yet to encounter a complaint about a held or deleted
email where BCC was the culprit.

As far as effectiveness - very low.  As far as false-positives - very low as
well. Virtually all messages ended up being held or deleted.

Of total messages:

BCC4...........1.55%
BCC6...........0.80%
BCC8...........0.41%

Messages that were HELD/DELETED and failed BCC (% of total messages):

BCC4...........1.51%
BCC6...........0.79%
BCC8...........0.41%


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206 



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Tuesday, April 12, 2005 01:12 PM
To: [email protected]
Subject: [Declude.JunkMail] DYNHELO Test


Is anyone using the DYNHELO test in Declude - if so do you have any 
information on it?  What specifically is it looking for?  False positive 
rate?    I found it in the new global.cfg file, but did not see any 
references to it in the manual. 

Also, for the BCC test any thoughts on what the sweet spot tends to be - by 
default it comes at 10.  Has anyone tweaked this? 

Darrell
 --------------------------------------------------------------------------
Try invURIBL - an advanced URI filtering test that will block more than 85% 
of all SPAM with the default configuration? Try it for free 
http://www.invariantsystems.com/invuribl/default.htm 

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to