On 04/06/10 20:24, Ron White wrote:
> Personally I've seen only a few oversized spams, but there was a time
> when I saw none at all.
I've had a few spam runs do this to me too. The largest spam I have ever
seen was ~250KB; it was an image spam that included many slightly
different versions of the same image. I assumed it was a mistake by the
spammer but it might also have been to bypass the SA limit. Almost all
the messages sailed through.
As a countermeasure to this, I ended up adding more ptr/helo checks
using dynastop which has helped to block considerably more connections
before they get to the data stage.
--
The Exim Manual
http://docs.exim.org/
