The ones that I have seen are about 200k (size=194761) they tend to carry an "invoice.zip" attachment, containing an "invoice.exe" file.
My Mimedefang filter is quarantining the attachement at the gateway, byt the messages are coming through. Mimedefang, in my case, sets a 48K maximum on the messages scanned for SPAM. On Wednesday 03 March 2010, Charles Gregory wrote: > On Wed, 3 Mar 2010, twofers wrote: > > I have been getting bombarded for weeks with these and even tho I have > > created specific rules in LOCAL.cf, Spamassassin refuses to even check > > The only reason for SA to 'refuse' to check a mail is if it exceeds the > SIZE LIMIT for scanning. This limit is most often not within SA itself, > but a parameter in whatever script/shell calls SA. > > If you are using 'spamc' as your client, make sure the -s (max size) > parameter is a good size to catch jpg and virus spam. I use 400000. > > - C -- Larry G. Starr - lar...@fullcompass.com or sta...@globaldialog.com Software Engineer: Full Compass Systems LTD. Phone: 608-831-7330 x 1347 FAX: 608-831-6330 =================================================================== There are only three sports: bullfighting, mountaineering and motor racing, all the rest are merely games! - Ernest Hemmingway
