What is the right DCC database expiration?

Vernon Schryver vjs@calcite.rhyolite.com
Wed Mar 3 20:24:57 UTC 2004


What is the right default DCC database expiration?  There are two
values.  The first is currently 2 days and is how long a DCC server
keeps reports of checksums of non-bulk mail.  If during that time
enough additional reports of the same checksums are received to
reach the "bulk" threshold, the report is kept for 30 days.

Both values contribute to the current sizes of DCC databases.
Reducing them would make the databases smaller.  In the first days
I chose defaults of 7 and 90 days.  7 days was to catch "slow"
spammers particularly when the total perspective of the DCC was a
few thousand mailboxes.  90 days was to catch repeated spammers.
In those days, the sizes of databases was not a concern.

I'm wondering if perhaps 7 days and 1 day would be enough with the
number of mailboxes contributing to the DCC's data today.  Would the
few spammers that send the same message for months at a time it enough
mailboxes and traps in each of their runs to make their odds of getting
through low enough?  If so, maybe even 7 days is too long.

How many spammers are very slow?


Vernon Schryver    vjs@rhyolite.com



More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.