We are seeing a few emails that are about a 1MB and appear to have
only a few lines of text. Upon further investigation, the email is in
HTML with a HUGE commented out part.

<html>
<body>
<center>
<!--
900KB of text
-->
links, text, crap, and other stuff
<!--
200KB of text
-->
</center>
</body>
</html>


On the command line, I manually run the message through SA and it
shows it has an 11.0 score. OK great it should have caught it.

X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.0 required=3.4 tests=BAYES_50,LONGWORDS,
        MISSING_DATE,MISSING_FROM,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,
        UNPARSEABLE_RELAY,URIBL_DBL_SPAM

dbg: timing: total 46640 ms
....
....
tests_pri_0: 42497 (91.1%)
....
....

BUT, because the live test likely took 46 seconds, I think SA is
giving up or something similar. The actual email run through the live
SA instance shows no score at all.

Reply via email to