From: "Jari Fredriksson" <ja...@iki.fi>
   Date: Fri, 9 Oct 2009 17:58:06 +0300
   
   This looks worrying. I have it at 2.2 pts, and not caused any false
   positives, but still, odd. Or is it? I know it is a SPAM indicator
   but a bulk indicator.

Auto correct: That should be 'I know it is *not* a spam indicator but a bulk 
indicator.'

Yes - it indicates bulk.  Lots of people have seen the email message.
DCC will hit spam, mailing lists, and retail email such as amazon, and
various extremely short email messages.
   
   But it is triggered for example by some mailing list posts which are genuine 
and not bulk.

What is a genuine mailing list post that is not bulk?  If lots of
people are on the mailing list then the message is, by definition, bulk.
   
   Is someone trying to poison DCC?

Yes, you are....(:-)   If you haven't whitelisted the mailing list then
you are reporting the email from the mailing list to DCC, which will
increase the DCC count.   Eventually somebody will report the mailing
list as spam to DCC and you will get a DCC match on the default
many=999999.

You have to whitelist the mailing list in the dcc whiteclnt file.

-jeff

Reply via email to