All that said, I can't see why you'd want to do anything else with DCC.The FP rate on DCC, even with the defaults of |999999 for fuzz counts, is significant. In the SA 3.1.0 set3 mass-checks, DCC_CHECK had a S/O of| 0.979, meaning that 2.1% of email matched by it was nonspam.
So more detail is not needed. Is the level you're describing equivalent to "many"?
Dan
