checksum choices?

Vernon Schryver vjs@calcite.rhyolite.com
Mon Oct 20 02:37:38 UTC 2003


> From: Alexy Khrabrov <braver@pobox.com>

> So -- does anybody know why spamcheck.net inserts *six* checksums:
>
> X-DCC-SPAMCHECK.NET-Metrics: angle 1168; From=85 Message-ID=1 Received=1 
>          Body=1 Fuz1=1 Fuz2=1
> while everybody else does the last *three* only?

Univac.spamcheck.net run with something like `dccd -K all` and so tracks
more checksums.

The non-body checksums have false positive problems.  Their
effectiveness turned out to not be justified by the space they
consume in the databases.  You'd probably do better with a blacklist
of domain names, IP addresses, or sender addresses.

>                                                   And, since From count
> turns out useful, is there a way to enable it?

Depending on which DCC client you are using, see the man page for
`dccproc -c`, `dccm -t`, or `dccifd -t`.  
For example, `dccm -t from,,20` will reject mail that the DCC server
says had a header from (as opposed to envelope Mail_From) count >= 20.

To configure your DCC client to use univac.spamcheck.net instead of
the instantaneous nearest of the DCC servers that answers to the name
dcc.dcc-servers.net, use something like

    cdcc "delete dcc.dcc-servers.net; add univac.spamcheck.net"


Vernon Schryver    vjs@rhyolite.com



More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.