Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Nick Edwards
On 3/15/15, Robert Schetterer wrote: > Am 14.03.2015 um 20:22 schrieb David F. Skoll: >> On Sat, 14 Mar 2015 20:17:27 +0100 >> Robert Schetterer wrote: >> >>> Ok, but big spam mails are extrem rare, i wouldnt invest time in that >> >> They are quite rare, but common enough IMO that our customers

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Jude DaShiell
I have been getting large spam messages for several years on one of my accounts. Since spamassassin cannot handle them, my only recourse are procmail recipes. -- Twitter: JudeDaShiell On Sun, 15 Mar 2015, Robert Schetterer wrote: Am 15.03.2015 um 12:05 schrieb Reindl Harald: Am 14.03.20

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Dave Warren
On 2015-03-15 17:26, Reindl Harald wrote: Am 16.03.2015 um 01:23 schrieb Dave Warren: On 2015-03-15 15:01, Reindl Harald wrote: surely, only 5% of incoming spam attempts make it to spamassassin / clamav here, but you need to keep in mind the amount of your regular ham messages in your mailflow

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 16.03.2015 um 01:23 schrieb Dave Warren: On 2015-03-15 15:01, Reindl Harald wrote: surely, only 5% of incoming spam attempts make it to spamassassin / clamav here, but you need to keep in mind the amount of your regular ham messages in your mailflow which unconditionally touch the content sc

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Dave Warren
On 2015-03-15 15:01, Reindl Harald wrote: surely, only 5% of incoming spam attempts make it to spamassassin / clamav here, but you need to keep in mind the amount of your regular ham messages in your mailflow which unconditionally touch the content scanners Why would it? I'd hazard a guess t

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 22:19 schrieb Robert Schetterer: hypothetical... spam tagging by spamassassin is "expensive" by design so it should be the last step in a long chain of different "antispam" features mostly i.e postscreen, clamav-milter, greylisting, rbl filtering, spf dkim dmarc checks surel

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 19:03 schrieb Axb: > On 03/15/2015 06:49 PM, Robert Schetterer wrote: >> Am 15.03.2015 um 18:32 schrieb Robert Schetterer: >>> tagging is allowed, rejecting is nice but not a must have >> >> if you like reject try working in milter chaining with >> milter-manager http://milter-mana

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread David F. Skoll
On Sun, 15 Mar 2015 14:19:17 -0500 (CDT) Dave Funk wrote: > However that glue can be intelligent and contain business logic. And getting back to the original topic... that is why my favorite milter is MIMEDefang. :) It does integrate with SpamAssassin, but it also lets you write your own busine

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Axb
On 03/15/2015 09:27 PM, Reindl Harald wrote: Am 15.03.2015 um 21:12 schrieb Axb: On 03/15/2015 09:00 PM, Reindl Harald wrote: that could be even a sloppy implementation just truncate after XX bytes and analyze the remaining piece to keep that part simple and fast - at the end it would improve

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 21:12 schrieb Axb: On 03/15/2015 09:00 PM, Reindl Harald wrote: that could be even a sloppy implementation just truncate after XX bytes and analyze the remaining piece to keep that part simple and fast - at the end it would improve the result with as less as possible overhead a

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Axb
On 03/15/2015 09:00 PM, Reindl Harald wrote: Am 15.03.2015 um 20:35 schrieb Axb: On 03/15/2015 08:22 PM, Reindl Harald wrote: Am 15.03.2015 um 19:50 schrieb Martin Gregorie: On Sun, 2015-03-15 at 19:23 +0100, Reindl Harald wrote: Am 15.03.2015 um 19:15 schrieb Axb: true but if the glue (

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 20:35 schrieb Axb: On 03/15/2015 08:22 PM, Reindl Harald wrote: Am 15.03.2015 um 19:50 schrieb Martin Gregorie: On Sun, 2015-03-15 at 19:23 +0100, Reindl Harald wrote: Am 15.03.2015 um 19:15 schrieb Axb: true but if the glue (spamass-milter) would truncate the message it

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Axb
On 03/15/2015 08:22 PM, Reindl Harald wrote: Am 15.03.2015 um 19:50 schrieb Martin Gregorie: On Sun, 2015-03-15 at 19:23 +0100, Reindl Harald wrote: Am 15.03.2015 um 19:15 schrieb Axb: true but if the glue (spamass-milter) would truncate the message it passes to spamc it would get back that

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 19:50 schrieb Martin Gregorie: On Sun, 2015-03-15 at 19:23 +0100, Reindl Harald wrote: Am 15.03.2015 um 19:15 schrieb Axb: true but if the glue (spamass-milter) would truncate the message it passes to spamc it would get back that truncated message with the added headers (whic

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Matus UHLAR - fantomas
Am 15.03.2015 um 19:03 schrieb Axb: IMO, deciding what chunk of a msg should be scanned should be managed by the glue and not by SA. On 15.03.15 19:09, Reindl Harald wrote: true but if the glue (spamass-milter) would truncate the message it passes to spamc it would get back that truncated mess

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Dave Funk
On Sun, 15 Mar 2015, Reindl Harald wrote: Am 15.03.2015 um 19:15 schrieb Axb: On 03/15/2015 07:09 PM, Reindl Harald wrote: [snip..] IMO, deciding what chunk of a msg should be scanned should be managed by the glue and not by SA. true but if the glue (spamass-milter) would truncate the m

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Martin Gregorie
On Sun, 2015-03-15 at 19:23 +0100, Reindl Harald wrote: > > Am 15.03.2015 um 19:15 schrieb Axb: > > On 03/15/2015 07:09 PM, Reindl Harald wrote: > >> > >> Am 15.03.2015 um 19:03 schrieb Axb: > >>> On 03/15/2015 06:49 PM, Robert Schetterer wrote: > Am 15.03.2015 um 18:32 schrieb Robert Schette

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 19:15 schrieb Axb: On 03/15/2015 07:09 PM, Reindl Harald wrote: Am 15.03.2015 um 19:03 schrieb Axb: On 03/15/2015 06:49 PM, Robert Schetterer wrote: Am 15.03.2015 um 18:32 schrieb Robert Schetterer: tagging is allowed, rejecting is nice but not a must have if you like re

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Axb
On 03/15/2015 07:09 PM, Reindl Harald wrote: Am 15.03.2015 um 19:03 schrieb Axb: On 03/15/2015 06:49 PM, Robert Schetterer wrote: Am 15.03.2015 um 18:32 schrieb Robert Schetterer: tagging is allowed, rejecting is nice but not a must have if you like reject try working in milter chaining wit

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 19:03 schrieb Axb: On 03/15/2015 06:49 PM, Robert Schetterer wrote: Am 15.03.2015 um 18:32 schrieb Robert Schetterer: tagging is allowed, rejecting is nice but not a must have if you like reject try working in milter chaining with milter-manager http://milter-manager.sourcef

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Axb
On 03/15/2015 06:49 PM, Robert Schetterer wrote: Am 15.03.2015 um 18:32 schrieb Robert Schetterer: tagging is allowed, rejecting is nice but not a must have if you like reject try working in milter chaining with milter-manager http://milter-manager.sourceforge.net/ ( stats included ) this give

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 18:32 schrieb Robert Schetterer: > tagging is allowed, rejecting is nice but not a must have if you like reject try working in milter chaining with milter-manager http://milter-manager.sourceforge.net/ ( stats included ) this gives you option for complex filter scenarios with div

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 17:53 schrieb Reindl Harald: > > Am 15.03.2015 um 17:24 schrieb Robert Schetterer: >> Am 15.03.2015 um 12:05 schrieb Reindl Harald: >>> >>> Am 14.03.2015 um 20:17 schrieb Robert Schetterer: Am 14.03.2015 um 18:11 schrieb Reindl Harald: > nobody but talks about cut content

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 15.03.2015 um 17:24 schrieb Robert Schetterer: Am 15.03.2015 um 12:05 schrieb Reindl Harald: Am 14.03.2015 um 20:17 schrieb Robert Schetterer: Am 14.03.2015 um 18:11 schrieb Reindl Harald: nobody but talks about cut content we talk about how to pass only a part to spamassassin instead sk

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Robert Schetterer
Am 15.03.2015 um 12:05 schrieb Reindl Harald: > > Am 14.03.2015 um 20:17 schrieb Robert Schetterer: >> Am 14.03.2015 um 18:11 schrieb Reindl Harald: >>> nobody but talks about cut content >>> >>> we talk about how to pass only a part to spamassassin instead skip large >>> messages entirely which i

Re: Handling very large messages (was Re: Which milter do you prefer?)

2015-03-15 Thread Reindl Harald
Am 14.03.2015 um 20:17 schrieb Robert Schetterer: Am 14.03.2015 um 18:11 schrieb Reindl Harald: nobody but talks about cut content we talk about how to pass only a part to spamassassin instead skip large messages entirely which in many case would be enough to detect a message as spam because t