[Mimedefang] How to catch large binary spam efficiently ?

[Henrik K]

On Tue, Feb 02, 2010 at 08:06:45PM -0800, Jeff Makey wrote:
> SpamAssassin only considers the text parts of a message when deciding
> whether it is too big to process, so the presence of large non-text
> MIME attachments (e.g., images) should not prevent SA from doing its
> thing when the total amount of text is less than 100K.

And where exactly does SpamAssassin core decide anything? Nowhere that I
know. It's up to the _client_ to decide whether to send anything for
scanning or not.

SA 3.3 handles truncated messages just fine. That's the way to go for big
messages, instead of sending 5M messages to it which will make "full" rules
go red. It needs some extra parameters for parse() so DKIM checks etc dosn't
break, you can find example of this from amavisd (search __TRUNCATED).