On Tue, Jan 29, 2002 at 06:55:56PM -0500, Duncan Findlay wrote:
| On Tue, Jan 29, 2002 at 05:53:01PM -0500, Mike Coughlan wrote:
| > > > My view on this (here, now) is :
| > > > If it is trivially easy to flag the virus within the existing SA
| > > > framework, why not?
| > 
| > Because I like how viruses are dealt with by my mail virus checker, and I
| > fear this will interfere.
| > 
| > 
| > > > Just three more lines in the config file, and easy enough for users to
| > > > turn on/off. (you can also argue - then add it to my own configuration
| > > > - and that is valid too)
| > 
| > I would prefer this go into an optional "virus" or personal config.
| > 
| > I would also stress that this may be false advertising.  I understand that
| > you may not be on Windows, but others running Spamassassin might be tempted
| > to try and deal with mail virus at this level, and it is really not he right
| > way.

Certainly.  I agree with the optional (with default to off for the
rest of you :-)) idea (assuming that any tests aside from the existing
2 are added).

| > Granted some might want to kill the noisy ILOVEYOUs, but there is no limit
| > to the possible virus names, and no limit to possible rules. This has the
| > potential to snowball.

Yeah, it would need to be cleaned out periodically.  Solution : make a
log when a virus is caught and remove tests that haven't gotten a hit
in a month (or something like that).  This doesn't have to be done by
SA either (the logging done by the MTA or filters if the tags are
regular enough and a separate tool can be made to summarize the
results).  The virii tend to die out after a while at which point the
tests are no longer needed.

| I agree thouroughly.  At the moment, my (very slow) system takes up to one
| minute per message (when only one message is being processed), and up to 20
| minutes when heavily loaded.
| 
| Needless to say, we do NOT need any superfluous tests.

Sure.  And a default to off of any superfluous tests achieves this as
well.  BTW, Duncan, are you using spamd?  On my (relatively fast)
system I see a major difference bewteen using spamd and
'spamassassin'.  (most scans take 1 second or so with spamd on my box)
 
-D

-- 

There are six things the Lord hates,
    seven that are detestable to him :
        haughty eyes,
        a lying tongue,
        hands that shed innocent blood,
        a heart that devises wicked schemes,
        feet that are quick to rush into evil,
        a false witness who pours out lies
        and a man who stirs up dissension among brothers.

        Proverbs 6:16-19


_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to