Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

nt mailing list" Datum: 14.11.2021 17:01 Betreff: Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? I can not decypher what this means: most - where? -> forum , bug tracker , self testing, forced by attacke

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

< assp-test@lists.sourceforge.net> Datum: 14.11.2021 00:14 Betreff: Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? I don't know what I've done to deserve that reply, but regardless, I'm sorry to h

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

ent mailing list" < > assp-test@lists.sourceforge.net> > Datum: 14.11.2021 00:14 > Betreff: Re: [Assp-test] Concept Question: Scan entire message for > Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? > -- > >

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

s Von:"K Post" An:"ASSP development mailing list" < assp-test@lists.sourceforge.net> Datum: 12.11.2021 22:46 Betreff: Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes reco

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

< > assp-test@lists.sourceforge.net> > Datum: 12.11.2021 22:46 > Betreff: Re: [Assp-test] Concept Question: Scan entire message for > Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? > -- > > > > First

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

uot; < assp-test@lists.sourceforge.net> Datum: 12.11.2021 16:56 Betreff: Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? Absolutely I've thought about this. I consider everything I post prior to

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

o write > your own level 2 assp-plugin. > > Thomas > > > > > > > > > Von: "K Post" > An: "ASSP development mailing list" < > assp-test@lists.sourceforge.net> > Datum:12.11.2021 16:56 > Betreff:R

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

level 2 assp-plugin. Thomas Von:"K Post" An: "ASSP development mailing list" Datum: 12.11.2021 16:56 Betreff: Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? Absolutel

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

YOU EVER thougth about that ??? Or do you only write > something to fillup the community mailing list? > > No - no way! > > Thomas > > > > > > > > Von:"K Post" > An:"ASSP development mailing list" < > assp-

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation? After about 12 weeks of going from MaxBytes of 4k to MaxBytes of 50k, 've seen: 1) Rebuild go from just over an hour (with 30k MaxFiles) to just over 2 hours. I'm fine

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

After about 12 weeks of going from MaxBytes of 4k to MaxBytes of 50k, 've seen: 1) Rebuild go from just over an hour (with 30k MaxFiles) to just over 2 hours. I'm fine with that, there's more to scan 2) Bomb detections improve, as a lot of what's detected is beyond the 20k or 30k mark 3) but,

Re: [Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

When looking at the "Use this HTML Parser" section on the GUI, I found this line: it is recommended to set MaxBytes to 5 (be carefull on heavy load systems - spam bomb regular expressions will take longer using 5!).\ I'm going to change my settings and see how bad the rebuild time is.

[Assp-test] Concept Question: Scan entire message for Bombs, regardless of MaxBytes setting? New MaxBytes recommendation?

Summary: *Should/could any consideration be given to having ASSP scan the entire message at the time it is received for Bombs (only), while still using MaxBytes for Bayesian/HMM?* We've been having some cleverly crafted messages slipping through all filters that would be easy to catch with Bombs