ePrism User Guide - EdgeWave

Anti-Spam Features
Configuring DCC
Select Mail Delivery -> Anti-Spam on the menu, and then DCC to configure Distributed
Checksum Clearinghouse.
Threshold Settings
The threshold is used to determine what should happen to mail when it has been classified.
• If bulk exceeds — DCC returns a number showing how many times the message has been
identified. This can be zero (unique and therefore not bulk) or another number, such as 1352,
indicating that the message has been reported 1351 prior times.
It may also return the value "many". This is a special DCC value returned when DCC has seen a
certain message in such volumes and in such a frequency that it is most certainly considered
"bulk".
For DCC to be useful, you need to specify a threshold that will trigger an action. It is
recommended that you enter either "many" or a value of 50 or 100.
Body1, Fuz1, and Fuz2 are settings that specify which checksums will be calculated and sent in.
It is recommended that you leave the default settings. These settings effectively counter the
efforts of spammers to randomize message content and evade detection as bulk. Results of the
various counts can be viewed in the transport logs.
Click the Advanced button to reveal additional settings such as From, ID, and IP. The selected
checksums must be supported by the DCC server to work properly and it is recommended that
you use the default settings. These additional settings should be used with caution, as they
may increase the risk of false positives.
120