On Thu, 22 Sep 2005, John Peacock wrote:
Gordon Rowell wrote:
If messages are smaller than 10k, the scanners don't get to see them:
You aren't the first to note this, unfortunately. It appears that the
memory_threshold override is not working correctly (which is really the
appropriate way to handle this, IMNSHO), though I believe it once was. What
mode are you using to run qpsmtpd (direct tcpserver, forkserver, Apache)?
forkserver.
However, there are a couple of considerations:
1) Are there any actual viruses in the wild <10k in size (with the assorted
mail headers remember) other than the EICAR test?
Even if there aren't today, there may be in the future. I don't think it's
worth taking risk on.