Re: all_spam_to

2021-06-03 Thread Matus UHLAR - fantomas
On 6/3/21 6:36 AM, Benny Pedersen wrote: this change score with default -100 even for spammy msgs On 03.06.21 22:02, Grant Taylor wrote: This is a very critical point to me. 1) it's not *all* spam. It's spam with a score of up to 100+whatever cut off you're using. 2) SpamAssassin still do

Plugin to extract Links from PDF

2021-06-03 Thread BenoƮt Panizzon
Hi Gang In the last couple of weeks, I have seen a lot of spam mails containing just one single PDF, hardly any other text. That PDF again contains a clickable picture leading to some phishing site or similar. Of course the URL in the PDF is not being checked against URI Blacklists. Also creatin

Re: all_spam_to

2021-06-03 Thread Grant Taylor
On 6/3/21 6:36 AM, Benny Pedersen wrote: this change score with default -100 even for spammy msgs This is a very critical point to me. 1) it's not *all* spam. It's spam with a score of up to 100+whatever cut off you're using. 2) SpamAssassin still does it's spam processing. Meaning it's n

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Matus UHLAR - fantomas
On 03.06.21 09:23, Henrik K wrote: > That's just outdated information. It's fine to scan even 20MB+ messages, it > just requires some memory. On Thu, Jun 03, 2021 at 09:32:28AM +0200, Matus UHLAR - fantomas wrote: and CPU and time... On 03.06.21 11:14, Henrik K wrote: Those are affected ve

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Benny Pedersen
On 2021-06-03 08:23, Henrik K wrote: On Thu, Jun 03, 2021 at 01:15:03AM -0500, Dave Funk wrote: Even more limiting, spamassassin is designed for small to medium size messages, scanning anything over 500KB or so is going to be a resource hog. That's just outdated information. It's fine to sc

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Benny Pedersen
On 2021-06-03 07:22, KADAM, SIDDHESH wrote: Hello Folks, Is there any possible way using we can scan for the content of an attachment ie .doc/pdf/.xls/ppt etc... Planning is to have a DLP kind of protection with the help of Spamassassin. good plans, but spamassassin is not a malware project o

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Henrik K
On Thu, Jun 03, 2021 at 08:39:08AM -0500, Dave Funk wrote: > > Also, spamassassin does not have a native built-in component for parsing > such media attachments, it would need to be some kind of add-in (EG the > "fuzzy ocr" plugin that was the rage a while ago). > As such it adds an additional comp

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Dave Funk
On Thu, 3 Jun 2021, Henrik K wrote: On Thu, Jun 03, 2021 at 09:32:28AM +0200, Matus UHLAR - fantomas wrote: On 03.06.21 09:23, Henrik K wrote: That's just outdated information. It's fine to scan even 20MB+ messages, it just requires some memory. and CPU and time... Those are affected very

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread @lbutlr
> On 03 Jun 2021, at 01:32, Matus UHLAR - fantomas wrote: > >> On Thu, Jun 03, 2021 at 01:15:03AM -0500, Dave Funk wrote: >>> Even more limiting, spamassassin is designed for small to medium size >>> messages, scanning anything over 500KB or so is going to be a resource hog. > > 500KB is defa

Re: all_spam_to

2021-06-03 Thread Benny Pedersen
On 2021-06-03 06:39, mau...@gmx.ch wrote: Here on this setup I have Postfix - spamassassin - Domino HCL And this "all spam to" would mean that mail with spam flag will be forwarding to this email Address? spamassassin does not reject mails ?>but users in all_spam_to should never get mail bl

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Henrik K
On Thu, Jun 03, 2021 at 09:32:28AM +0200, Matus UHLAR - fantomas wrote: > On 03.06.21 09:23, Henrik K wrote: > > That's just outdated information. It's fine to scan even 20MB+ messages, it > > just requires some memory. > > and CPU and time... Those are affected very little by message size. And

Re: Scan Attachment Content Using Spamassassin

2021-06-03 Thread Matus UHLAR - fantomas
On Thu, Jun 03, 2021 at 01:15:03AM -0500, Dave Funk wrote: Even more limiting, spamassassin is designed for small to medium size messages, scanning anything over 500KB or so is going to be a resource hog. 500KB is default max size for spamc, not for spamassassin itself. You can rise it. On 03.

Re: all_spam_to

2021-06-03 Thread Matus UHLAR - fantomas
On 03.06.21 06:39, mau...@gmx.ch wrote: Here on this setup I have Postfix - spamassassin - Domino HCL And this "all spam to" would mean that mail with spam flag will be forwarding to this email Address? no. It means that addresses in all_spam_to (not "all spam to") will be whitelisted: score