On 3/29/10 1:09 PM, Charles Gregory wrote:
Literally, Mega-Spam. I just got a spam with 1MB of images.
My suggestion has been made before, but I would like to ask that it
now be taken a bit more seriously. SA needs an option to allow efficient
'partial' scanning of large e-mails, so that, for example, we can
peform all the valuable header checks, and maybe even scan for URIBL
hits within the first few hundred K of the body?
could, will and does mess up dkim checks and language checks.
That said, amavisd-new has a switch to do this already, and for the very
same reason.
(yes, it costs the scumbags nothing to have aunt martha and her zombot
send out 600MM 1MB spams)
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
