Fred - I just upgraded to 2.60 and things seem to be a little better now, also increased the size of an email that SA will reconize helped a lil' to.
-----Original Message----- From: Fred [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 11:51 PM To: Abigail Marshall; Stephen Reese Subject: Re: Re[2]: [SAtalk] why is sa not catching the microsoft emails ? This could also be 2.55 issue where messages with multiple MIME parts was not completly scanned? For example, the thread about pic.gif where that spammer used some trick with multiple mime parts and that caused the message to be invisible. The good news is this is fixed in 2.60 and that's a final release now. Frederic Tarasevicius Internet Information Services, Inc. Abigail Marshall wrote: > Hello Stephen, > > Tuesday, September 23, 2003, 3:09:51 PM, you wrote: > >> hmmmm, i still don't understand why SA is not even looking at them >> though see's everything else? > > Because the 150K attachment that comes with Swen is either too big to > be sent to SA (depending on how you have configured SA), or else it is > so big that though SA tries to process it, it is failing due to an > out-of-memory problem. (When SA fails, it aborts, and the message > simply goes through). > > If you use procmail to call SA, you should prefilter for viruses. I > have caught 105 instances of Swen today alone, 411 total, with this > procmail recipe: > > #Win32.Swen.A - KILL >> 0B > * >140000 > * <190000 > * BTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4ga > { LOG="SwenA" > :0 h > /dev/null > } > > If you have a high volume of email coming in, a virus with a large > attachment like Swen can end up causing a lot of performance and > memory problems with Spamassassin in any case -- so basically it's > best to prefilter this by whatever tools are at your disposal. > > -Abigail > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Spamassassin-talk mailing list [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
