Spam Scanning Larger Messages

[Clayton Keller]

On 06/14/2011 10:56 AM, Michael Scheidell wrote:
> On 6/14/11 11:05 AM, Clayton Keller wrote:
>> I know in 2.6.3 the ability to pass partial messages to SpamAssassin
>> was put into place:
>>
>> "- large messages beyond $sa_mail_body_size_limit are now partially
>> passed to SpamAssassin and other spam scanners for checking: a copy
>> passed to a spam scanner is truncated near or slightly past the
>> indicated limit. Large messages are no longer given an almost free
>> passage through spam checks"
>>
>> Is it possible to revert back to the previous method of not scanning
>> these messages? Or is it considered better practice to go ahead and
>> provide some scanning giving the attachment and image type spams we
>> see periodically these days?
>>
> so, you want the spammers to just attach a 500K pdf, or image and you
> give them a free pass?
> Just curious, what advantage do you think this will give you?
>

Thank you for the response Michael.

I'm not thinking this will give me any advantage at all. Especially 
given the behavior of the amavis truncating the message close to the 
threshold prior to scanning.

If this scanning behavior looks to cause an issue with some messages, I 
can deal with those edge cases as they come up.