>Thanks Scott. I've enabled the HEUR10 test with a weight of "0" and the >"WARN" action to see what kinds of messages would get flagged. I have found >several flagged messages that were indeed spam, but can you tell me what the >heuristic tests are looking for in the e-mail messages. Is it key words in >the subject and/or message body or something else?
It looks at a LOT of stuff. Most of what it looks for is in the body of the E-mail. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .