On Tue, 8 Sep 2009, Jason Haar wrote:

We're having problems with a particular class of email. >400K in size, text-only.

Do you have any stats on how spammy this class of mail is? Is it pure ham that you can detect using other methods, e.g. it's sent from a trusted source?

If so, you may be able to develop some rules to detect these messages and use those rules at the MTA glue level to tell it to skip SA processing for those messages.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Homeland Security: Specializing in Tactical Band-aids for Strategic
  Problems.                       -- Eric K. in Bruce Schneier's blog
-----------------------------------------------------------------------
 9 days until the 222nd anniversary of the signing of the U.S. Constitution

Reply via email to