[Mimedefang] Header only tests for big mails in spamassassin

[Rob MacGregor]

On Sun, 28 Nov 2004 00:54:14 +0100 (CET), Martin Blapp <mb at imp.ch> wrote:
> 
> Hi all,
> 
> We get more and more spams which are big enough to be
> skipped in spamassassin. I'm thinking now about adding
> another spamassassin check but only with the header as
> argument, so bad relays etc. would still be catched
> and the mails will be marked as SPAM.
> 
> What do you think about this idea ?

Personally, given the 150 KB spams I've been getting lately, I'd like
to see this.  So far a headers only check would catch 100% of my
"oversized" spam.

Actually, it could be a useful speedup in general.  Run a headers only
check on all mail, only if it gets more than N hits do you give it a
full SA run.  You take a hit on the stuff most likely to be spam, but
you gain on (what hopefully should be) the majority of mail.

-- 
                 Please keep list traffic on the list.
Rob MacGregor
      Whoever fights monsters should see to it that in the process he 
        doesn't become a monster.                  Friedrich Nietzsche