since most filters skip large messages, it may be tempting for spammers to send large messagess:

- using a large but "invisible" part (either by using mime and putting a large text part in an alternative mime, or using "invisible" chars before their own text).

- using a large image

- large "tail" (spammers can append anything....).

- "unused" attachments

questions:
- has this already been seen?
- how can we mitigate this?


my first thought would be to "process" the message before passing it to the filter. In particular, are there drawbacks/benefits if I remove attachments before passing them to SA (or any other filter)?

Reply via email to