Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-08 Thread Kevin A. McGrail
On 9/7/2014 1:47 AM, Henrik K wrote: Also there's my patch to make SA handle big blobs gracefully: https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6582 Skipping large messages is a bit of 90's mentality since technically it's pointless. Which reminds me I need to write a config option

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-06 Thread Henrik K
On Fri, Sep 05, 2014 at 06:38:23PM +0200, Matus UHLAR - fantomas wrote: > >W dniu 2014-09-05 17:55, Justin Edmands pisze: > >>We are seeing a few emails that are about a 1MB and appear to have > > On 05.09.14 18:09, Adi wrote: > >You should consider limiting SA processing to mail size > >up to 150

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-06 Thread Matus UHLAR - fantomas
I'm happily filtering all mail with SA and it did catch much of spam. unfortunately there IS spam >256K... On 05.09.14 18:59, Adi wrote: Of course, but rather it is such a small percentage compared to the good messages (bigger than 250 KB). IMHO rather that it is not worth it to filter. if

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Tom Hendrikx
On 09/05/2014 09:16 PM, Jari Fredriksson wrote: > 05.09.2014, 21:56, Karsten Bräckelmann kirjoitti: >> On Fri, 2014-09-05 at 11:55 -0400, Justin Edmands wrote: >>> We are seeing a few emails that are about a 1MB and [...] >>> dbg: timing: total 46640 ms >>> BUT, because the live test likely took 46

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Jari Fredriksson
05.09.2014, 21:56, Karsten Bräckelmann kirjoitti: > On Fri, 2014-09-05 at 11:55 -0400, Justin Edmands wrote: >> We are seeing a few emails that are about a 1MB and [...] >> dbg: timing: total 46640 ms >> BUT, because the live test likely took 46 seconds, I think SA is >> giving up or something simi

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Karsten Bräckelmann
On Fri, 2014-09-05 at 11:55 -0400, Justin Edmands wrote: > We are seeing a few emails that are about a 1MB and [...] > dbg: timing: total 46640 ms > BUT, because the live test likely took 46 seconds, I think SA is > giving up or something similar. The actual email run through the live > SA instan

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Adi
Hi >> You should consider limiting SA processing to mail size >> up to 150-250 KB. >> >> very few spam messages is bigger. > > I'm happily filtering all mail with SA and it did catch much of spam. > unfortunately there IS spam >256K... Of course, but rather it is such a small percentage compare

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Kris Deugau
Justin Edmands wrote: > We are seeing a few emails that are about a 1MB and appear to have > only a few lines of text. Upon further investigation, the email is in > HTML with a HUGE commented out part. I haven't seen any over 1M recently, but these have been a long-running nuisance here. The late

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Matus UHLAR - fantomas
W dniu 2014-09-05 17:55, Justin Edmands pisze: We are seeing a few emails that are about a 1MB and appear to have On 05.09.14 18:09, Adi wrote: You should consider limiting SA processing to mail size up to 150-250 KB. very few spam messages is bigger. I'm happily filtering all mail with SA

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread John Hardin
On Fri, 5 Sep 2014, Justin Edmands wrote: We are seeing a few emails that are about a 1MB and appear to have only a few lines of text. Upon further investigation, the email is in HTML with a HUGE commented out part. To (hopefully) bypass filters that scan only the first part of the messag

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Adi
W dniu 2014-09-05 17:55, Justin Edmands pisze: > We are seeing a few emails that are about a 1MB and appear to have You should consider limiting SA processing to mail size up to 150-250 KB. very few spam messages is bigger. Best Regards

Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Justin Edmands
We are seeing a few emails that are about a 1MB and appear to have only a few lines of text. Upon further investigation, the email is in HTML with a HUGE commented out part. links, text, crap, and other stuff On the command line, I manually run the message through SA and it shows it has