> The most effective way I've found to lower the SA footprint is to limit
> the mail that gets to it by using some triage on the MTA side. SA as a
> standalone tool might benefit from some kind of triage functionality to
> kill messages immediately as per a "blacklist" rule. The blacklist
> rule(s) would be run against the messages before the normal ruleset was
> applied. If any of the blacklist rules were triggered, the message
> would be dropped without further scanning.
>
I am not sure that messages after positive blacklist check will be dropped.
As far as I see, SA just adds 100 points to this message and continues
checking.
And I am not sure about the order of rules in checking process.
--
View this message in context:
http://www.nabble.com/Suggestion-to-developers-tf4429767.html#a12638431
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
