Vahric MUHTARYAN wrote:
>
> Now still some messages are passing !
Yes - anything over 300K will do.
Do you want to reject them unscanned or pass them unscanned?
DoS / mailbomb attacks aside, most WinCrobes are seldom large,
simply 'coz it takes the zombie-farmers too log to hit as many
targets.
We scan a bit larger, (500k or even 1 MB) then pass the really
big stuff with nary a problem.
YMMV.
Bill
> Additionaly I have a extra lines below I think I should to make same changes
> on it right ?
>
> warn message = X-New-Subject: !!***SPAM***!! $h_subject:
> spam = nobody
>
> Thanks
>
>
> -----Original Message-----
> From: nigel@??? [mailto:nigel@dev.intechnology.co.uk] On
> Behalf Of Nigel Metheringham
> Sent: Wednesday, February 08, 2006 2:29 PM
> To: Vahric MUHTARYAN
> Cc: 'W B Hacker'; exim-users@???
> Subject: RE: [exim] condition problem
>
> On Wed, 2006-02-08 at 14:24 +0200, Vahric MUHTARYAN wrote:
>
>>I made it like this but nothing changed
>
>
> Ah - no - warn is the verb, it must come first. What you have done is
> moved the condition to the previous ACL
>
> Change it to:-
>
> warn condition = ${if < {$message_size}{300K}}
> spam = nobody:true
> message = X-Spam_score: $spam_score\n\
> X-Spam_score_int: $spam_score_int\n\
> X-Spam_bar: $spam_bar\n\
> X-Spam_report: $spam_report
>
