This could also be 2.55 issue where messages with multiple MIME parts was
not completly scanned?
For example, the thread about pic.gif where that spammer used some trick
with multiple mime parts
and that caused the message to be invisible. The good news is this is fixed
in 2.60 and that's a final
release now.
Frederic Tarasevicius
Internet Information Services, Inc.
Abigail Marshall wrote:
> Hello Stephen,
>
> Tuesday, September 23, 2003, 3:09:51 PM, you wrote:
>
>> hmmmm, i still don't understand why SA is not even looking at them
>> though see's everything else?
>
> Because the 150K attachment that comes with Swen is either
> too big to be sent to SA (depending on how you have
> configured SA), or else it is so big that though SA tries to
> process it, it is failing due to an out-of-memory problem.
> (When SA fails, it aborts, and the message simply goes
> through).
>
> If you use procmail to call SA, you should prefilter for
> viruses. I have caught 105 instances of Swen today alone,
> 411 total, with this procmail recipe:
>
> #Win32.Swen.A - KILL
>> 0B
> * >140000
> * <190000
> * BTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4ga
> { LOG="SwenA"
> :0 h
> /dev/null
> }
>
> If you have a high volume of email coming in, a virus with a
> large attachment like Swen can end up causing a lot of
> performance and memory problems with Spamassassin in any
> case -- so basically it's best to prefilter this by whatever
> tools are at your disposal.
>
> -Abigail
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
