This is a dev question.
Since SA scores for identical messages are identical if the message is simply passed to SA via perl (like from MailScanner), wouldn't it increase SA's performance if it cached scores for a short time based on message checksum?
This would be beneficial in typical dictionary attacks when messages are not unique in some way, or when sendmail is splitting recipients using queue groups so that a message with 10 recipients is actually passed to SA 10 times. That might sound odd, but using MailScanner with SA and sendmail on a mail gateway/relay, this is commonly done to permit per user rules. The time SA sometimes spends scanning identical messages is a waste of cpu.
Something like pyzor, or dcc could plug-in or wrap SA and cache checksums and scores fairly easily, right? Has anyone else spent any time on this?
Thanks for your thoughts.
Ken A Pacific.Net
