On Fri, 1 Sep 2017, Paul Lenz wrote:
> From: Paul Lenz <paul@???>
> To: exim-users@???
> Date: Fri, 1 Sep 2017 20:49:24
> Subject: Re: [exim] Exim4 skips SpamAssassin if attachments are too big
...
> It seems to me, that using SpamAssassin is like shooting with guns
> against flies. I wrote my own SpamAssassin plugin which detects
> a big lot of spam, but actually I would be glad if I would not
> need SpamAssassin to run my plugin. I would say, 80% of all spam
> is rather easy to detect, and a small fast program could do it as
> well. Only the rest of 20% should be checked by SpamAssassin using
> Spamhaus block lists and other tricky stuff.
If you're running virus detection using ClamAV, you might find the
unofficial signatures useful. See:
http://sanesecurity.com/
for details.
It's a few years ago now, but I found the unofficial signatures were
good at detecting a lot of spam, phishing etc. And fast to use as
the signatures are stored in memory. Certainly faster than using
SpamAssassin. You'd obviously ClamAV after relatively inexpensive
measures such as block lists.
--
Dennis Davis <dennisdavis@???>
