On Thu, 23 Oct 2014, geoff.spamassassin140...@alphaworks.co.uk wrote:
On 04/09/2014 15:56, John Hardin wrote:
On Thu, 4 Sep 2014, Geoff Soper wrote:
> I've got an issue whereby spam messages seem to be somehow bypassing SA
> and getting into my inbox.
>
> : 0fw: spamassassin.lock
> * < 400000
> | spamc -x
Are the messages that bypass SA always rather large?
No, unfortunately not... I understand why the large messages bypass SA but
not the small ones.
As a slightly related aside, what do people typically do about larger
messages containing virus laden zip files?
Personally, my site security policy is no zipped executables absent prior
arrangement.
<plug
type="shameless">http://www.impsec.org/email-tools/procmail-security.html</plug>
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
If Microsoft made hammers, everyone would whine about how poorly
screws were designed and about how they are hard to hammer in, and
wonder why it takes so long to paint a wall using the hammer.
-----------------------------------------------------------------------
875 days since the first successful private support mission to ISS (SpaceX)
