Hi,
http://wiki.apache.org/spamassassin/OutOfMemoryProblems
This link suggests that one should skip sending large emails to
SpamAssassin (for better performance). It states that "Tests show
that larger messages are overwhelmingly likely to be non-spam, given
the economics of spamming". If spammers use botnets to pump spam, is
this statement still valid ?
In case of botnet spamming, spammers may send large emails (as it is
the network of the botnet which is used, but not the spammer), with
top most portion of the email containing spam message & rest of the
email having some bulk to sizeup the email.
Is it not better if SA takes any-size email & attempts scanning on
only the top-most portion (say initial 500KB) of the email content
(as it may not make sense for spammers to keep their advertisement in
later portions of the email) ?
Please comment.
Thanks,
Babu
********************************************************************************
This email message (including any attachments) is for the sole use of the intended recipient(s)
and may contain confidential, proprietary and privileged information. Any unauthorized review,
use, disclosure or distribution is prohibited. If you are not the intended recipient,
please immediately notify the sender by reply email and destroy all copies of the original message.
Thank you.
Intoto Inc.
