Re: Handling very large messages (was Re: Which milter do you prefer?)

[Reindl Harald]

Am 15.03.2015 um 17:24 schrieb Robert Schetterer:

Am 15.03.2015 um 12:05 schrieb Reindl Harald:

Am 14.03.2015 um 20:17 schrieb Robert Schetterer:

Am 14.03.2015 um 18:11 schrieb Reindl Harald:

nobody but talks about cut content

we talk about how to pass only a part to spamassassin instead skip large
messages entirely which in many case would be enough to detect a message
as spam because the "oversize" are just binary parts

Ok, but big spam mails are extrem rare, i wouldnt invest time in that

you are so terrible wrong

my intention was never to agree with you

so what....

more and more spam messages are coming with a very large image because
spammers know the default 256 KB limit which also affects commercial
products like from Barracuda Networks, that is not a new trend

there is a reason for "-s 5242880" in our setup while i started with "-s
786432" a few months ago

as i wrote this may happen at your site, you should not set your
experience as ultimate

but you did that with "Ok, but big spam mails are extrem rare"

everyone has his/its own spam, i dont see any rise in large mail spam here

that may be true for *your* account but hardly in case of a large user-base for all users, you just don't notice the bypassed junk

back to topic i would recommend a two stage spam filtering, if you got
in trouble with "big spam mail", i.e spamass-milter in front line, then
"perhaps" combine sieve filters with size/spam matches etc

that can't work beause at that stage you already received the message instead reject it and so can't discard it without backscattering

signature.asc
Description: OpenPGP digital signature