Thanks Larry,

I do understand that 99999 is what the documentation says, but thank you for clearing up the headers vs config for me.

I am a bit concerned though, the docs make reference to setting the number very high, but they give us no indication or real understanding of the dcc tests.

I understand that they are a message checksum count system, but if a message has been seen even say... 1000 times, isnt that a good indicator that it may be bulk if not unsolicited?

Does anybody have an in depth understanding of the dcc tests? are they even worth using if we apparently have no faith in them? And is a 99999 a little late? Sure if 100k people have seen it we can likely consider it spam, but why 100k? why not less?

-Arlo

On Wednesday, October 22, 2003, at 01:35 AM, Larry Gilson wrote:

Hi Arlo,

-----Original Message-----
From: Arlo Gilbert [mailto:[EMAIL PROTECTED]
Sent: Monday, October 20, 2003 4:58 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] dcc returns letters not numbers. docs say
to limit #'s


I'm hopeful that somebody can explain the dcc results to me.


i understand the concept of dcc,  however spamassassin docs say
that you should set limits that are numeric. eg. 9999 so that dcc
doesnt give false positives.

upon looking at the headers however, i see the following:

X-Spam-DCC: SINECTIS: spammed 1114; Body=2 Fuz1=many Fuz2=many

obviously the fuz1=many is a handy tool there to identify
that this is likely a bulk message, but i'm unsure how 9999 relates
to "many".

any thoughts? or am i missing something here?

I hope I write this correctly. The threshold has to be a number and not an
indication. The counts many, ok, ok2, are used in the X-DCC Headers. It is
not the actual count supplied to the client. The number in the docs for
many is 999999 and not 9999. So it is really saying that the number 999999,
which is the default and means many for the header purpose, is the threshold
at which SA will consider the test positive and give it points.


It might make a little more sense if after you read the conf doc:

http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html

To take a look at the dccproc doc:

http://www.dcc-servers.net/dcc/dcc-tree/dccproc.html



Hope this helps!

--Larry



-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk





------------------------------------------------------- This SF.net email is sponsored by OSDN developer relations Here's your chance to show off your extensive product knowledge We want to know what you know. Tell us and you have a chance to win $100 http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to