On Thu, 27 Apr 2017 17:34:16 -0400 Billy Huddleston wrote: > OKay, Copy of of a spam is located at https://pastebin.com/gdCB9V6U > > It processed okay with spamassassin -t -D
That's probably because it's only doing one at a time. I suspect that these spams are so CPU intensive that you would be CPU limited at 1 child process per core. What I am seeing is that a considerable amount of that "<!$<<" stuff is getting into the normalized body, so all the ordinary body rule are seeing it, and not just the HTML parser and full/rawbody rules.
