Maximum Message Size for Spamfilter Check?
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6264
Printed Date: 23 February 2025 at 1:02am
Topic: Maximum Message Size for Spamfilter Check?
Posted By: mikek
Subject: Maximum Message Size for Spamfilter Check?
Date Posted: 10 October 2007 at 3:10am
|
I know there is an MaxMsgSizeForKeywordScan option, but is there also a MaximumMsgSizeForQuarantine or MaximumMsgSizeForSpamFiltering? I my opinion, checking for Spam in Mails > 2 MB could be disabled (until Spammers start sending such big mails...) The problem I'm having is I work with a MySQL Database and there you have to set the "Max Packet Size" to accomodate the largest INSERT into the quarantine that will be possible. Now, with the "emtpy mail with attachments" filter, sometimes very large false positives can't get quarantined because I don't want to set my "Max Packet Size" to 30 MB or more just for these few mails and waste a lot of memory for all other operations. Other thoughts or suggestions or do we have a feature request already? :-) 
|
Replies:
Posted By: LogSat
Date Posted: 10 October 2007 at 6:18pm
|
mikek, This may be a very valid issue you brought up. Are you looking for SpamFilter to: (1) block what it thinks is a spam email larger than 2MB, but not enter it in the quarantine, or.. (2) if an email larger than 2MB arrives that SpamFilter thinks is spam, whitelist it and deliver it, since if it's over 2MB most likely it won't be spam as a spammer won't bother to send sch large emails? ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: mikek
Date Posted: 11 October 2007 at 4:26am
|
I would see a feature like a MaximumMsgSizeForSpamFiltering option. If the e-mail is larger than the configured value, only the anti-virus check will be done, but otherwise the mail is forwarded unfiltered. When we see spammers sending larger mails in the future, the option value can be increased, knowing that the Max Packet Size for MySQL has to be increased to at least that value as well.
|
Posted By: LogSat
Date Posted: 22 October 2007 at 10:21pm
|
FYI - We're currently beta testing internally a new build of SpamFilter with the following additions: // New to VersionNumber = '3.5.4.728'; {TODO -cNew : Added header 'X-SF-Originating-IP' in emails to additionally log the peer IP address} {TODO -cNew : Added option MaxMsgSizeForSpamFiltering in SpamFilter.ini file to whitelist emails that are larger than a specific size} {TODO -cNew : Added option ForwardAllSPAMtoEmailAddress in SpamFilter.ini file to forward all spam emails to an alternate email address} ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: mikek
Date Posted: 24 October 2007 at 5:21am
Cool, can't wait to get a hold of this new version (I even gave the new option it's name, I'm so proud of myself  )
|
Posted By: Thermo
Date Posted: 24 October 2007 at 5:01pm
|
The default setting is MaxMsgSizeForSpamFiltering=768 is this 768KB? To disable it do we leave it blank like this? MaxMsgSizeForSpamFiltering= |
Posted By: LogSat
Date Posted: 24 October 2007 at 5:04pm
|
mikek, your "baby" is ready for pickup We uploaded build 728 in the registered user area. As a side-note, by default the value will be: MaxMsgSizeForSpamFiltering=768 The above entry will be automatically created in the SpamFilter.ini file any time the "Save Settings" button is pressed. The 768 is KB. If you have any input on that default value (too high, too low), we'd sure like to hear about it. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: LogSat
Date Posted: 24 October 2007 at 5:08pm
|
Thermo, You have a valid point. We need to have an option to disable it, and we do not currently. For now, setting it to something like 1000000 (the value indicates KB, so this would be =1GB) should essentially render it ineffective and practically disable it. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: mikek
Date Posted: 25 October 2007 at 2:44am
|
Hi Roberto, Great job! Installed and testing...
|
Posted By: Desperado
Date Posted: 25 October 2007 at 12:03pm
|
Roberto, Et Al,
This new setting is fantastic! Saves a lot of False Positives and saves CPU on my server. The default size ... I have a "Spam Trap" address that is tag only and I sorted 19,457 by size. 1 was 190K, 10 fell in between 100K and 190K. The rest are very small. We are using a setting of 200K now and are awaiting the long term results but this setting looks VERY good right now. ------------- The Desperado Dan Seligmann. Work: http://www.mags.net Personal: http://www.desperado.com |
Posted By: LogSat
Date Posted: 25 October 2007 at 2:38pm
|
mikek is the one to thank, it was his idea :-) !! and a mighty good one too... we're kicking ourselves for not having thought of it on our own!
------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |