|Main Archive Page > Month Archives > spamassassin-users archives|
On 25-Jun-2010, at 10:50, Ted Mittelstaedt wrote:
> SA would parse the entire attachment except that there's a default setting saying to stop processing after a certain amount of KB of
> data has been processed. The idea is that a spammer isn't going to send
> a large attachment on every spam.
That's not quite right, unless the behavior is changed in 3.3. Emails over a certain size are not checked *at all*, which is not the same as checking stopping after a certain point.
I would think SA would be much more effective if it checked the headers and plain parts (if any) of every email, regardless of the size of the rest of the attachments, but I expect the processing for large mails is too much of an issue, even if they aren't being fully checked.
-- One of the most basic rules of survival on any planet is never to upset someone wearing black leather. --The Last Continent