Re: [AMaViS-user] Maximum message size to scan

This is a discussion on Re: [AMaViS-user] Maximum message size to scan within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; I have been using 512 * 1024 for months (9 or more) on every system I have built. These systems are ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-31-2005
Mark Burdick
 
Posts: n/a
Default Re: [AMaViS-user] Maximum message size to scan

I have been using 512 * 1024 for months (9 or more) on every system I
have built. These systems are no powerhouse machines - they have 512MB
RAM and a PIII processor (450-500MHz).

My systems process an average of 300,000-400,000 message attempts per
month, and CPU cycles are never an issue. I see only about 22% of all
message attempts actually make it through my systems without being
quarantined, almost never get false positives (except for messages
rejected because the remote server isn't configured properly), and
flat-out reject about 35% of attempts at the "front door" (they're
never allowed in).

HOWEVER: I also use a lot of regular expressions with my mail server
software (postfix) to weed out the obvious junk, and also use a lot of
different Real-Time Block Lists to prevent unwanted client connections
in the first place.

So, the messages that make it to Amavis are often able to be scanned
very quickly and pass right through without issue.

--- Mark Martinec <Mark.Martinec+amavis@ijs.si> wrote:

> Martin,
>
> > I have seen a couple of spams bypass our spamassassin scan because

> they
> > are larger than the 200KB default $sa_mail_body_size_limit. I'm

> thinking
> > about raising that limit to 512KB. If anyone have raised it, what

> size
> > have you configured it to? Has it done a huge impact on the load?

>
> You can try. The CPU time consumed by SA regexp rules goes linearly
> with mail size, so if you can afford it, and you are seeing larger
> spam
> messages, increase the limit somewhat - e.g. to the largest spam size
> that came through recently.
>
> Mark
>
>
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO
> September 19-22, 2005 * San Francisco, CA * Development Lifecycle
> Practices
> Agile & Plan-Driven Development * Managing Projects & Teams * Testing
> & QA
> Security * Process Improvement & Measurement *
> http://www.sqe.com/bsce5sf
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/...fo/amavis-user
> AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/howto/
>





__________________________________________________ __
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 04:46 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0