Re: [exim] Spamassassin bypass

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Ted Cooper
Datum:  
To: exim-users
Betreff: Re: [exim] Spamassassin bypass
On 04/06/10 20:24, Ron White wrote:
> Personally I've seen only a few oversized spams, but there was a time
> when I saw none at all.


I've had a few spam runs do this to me too. The largest spam I have ever
seen was ~250KB; it was an image spam that included many slightly
different versions of the same image. I assumed it was a mistake by the
spammer but it might also have been to bypass the SA limit. Almost all
the messages sailed through.

As a countermeasure to this, I ended up adding more ptr/helo checks
using dynastop which has helped to block considerably more connections
before they get to the data stage.

--
The Exim Manual
http://docs.exim.org/