I'm not sure you want to go that route - there's a lot of good spam fodder at the top of a message. The pattern matching engine in sniffer can afford to wade through the entire message so we've got a lot of rules in the Sniffer database that start in the top of a message and end in the bottom.
If you can't afford to scan the whole message then you might scan the top and the bottom and leave out the middle. This would likely work better than skipping one end or the other. My $0.02. _M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Kami Razvan | Sent: Tuesday, September 03, 2002 12:25 PM | To: [EMAIL PROTECTED] | Subject: RE: [Declude.JunkMail] FILTER test...how much of the | body does it read? | | | Hi; | I think this is a great idea... Why not actually have an | option to scan the top or the bottom. I know in our case if | I have only one choice I would choose the bottom of the | e-Mail for scan. | | Because most of our Word Filter is based on the bottom of the | spams. I had no idea that it is only 8000 characters. | | Regards, | Kami | | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of R. | Scott Perry | Sent: Tuesday, September 03, 2002 11:57 AM | To: [EMAIL PROTECTED] | Subject: Re: [Declude.JunkMail] FILTER test...how much of the | body does it read? | | | | >Can you remind me how much of the message body JunkMail | scans with the | >FILTER test? | | It scans the first 8,000 or so characters. | | >I was using 1.56i at the time and just installed 1.58b. Is there an | >option to have it scan the full body since a lot of the | tell-tale spam | >identifiers are at the end? If not, can it be added in the future? | | There isn't such an option, but it is one that we could add | (although it | | could add significantly to CPU usage). | -Scott | | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
