since most filters skip large messages, it may be tempting for spammers
to send large messagess:
- using a large but "invisible" part (either by using mime and putting a
large text part in an alternative mime, or using "invisible" chars
before their own text).
- using a large image
- large "tail" (spammers can append anything....).
- "unused" attachments
questions:
- has this already been seen?
- how can we mitigate this?
my first thought would be to "process" the message before passing it to
the filter. In particular, are there drawbacks/benefits if I remove
attachments before passing them to SA (or any other filter)?