Re: Virus emails
On Tue, Sep 23, 2003 at 12:52:30PM -0700, Steve Lamb wrote:
> > > Same here though I am sticking with SA-Exim because it saves the mail
> > > in a certain range so I can throw it at the Bayesian classifier.
>
> > I usually don't have large enough partitions to hold all the spam (!)
>
> Certain range. Here it is things scored between 5 and 8. 5 is where
> things are considered spam. 8 is where I reject things outright. 12 is where
> autolearn is set. I want to send things in that range to the Bayesian
> classifier so the score would creep up hopefully to the point of being
> rejected. Comes out to about 1-2 a day.
Even so, on most of my servers the traffic is much higher. :/
> > > It also has the option of teergrubing.
>
> > I'm a bit scared of turning it on, didn't (see|read) enough documentation
> > for it.
>
> Simple concept, if a message scores high enough (25 is default) you just
> string the connection out for 5 minutes.
I'll have to turn that on then.
> > > It's generally accepted that for robust handling of Spam SA-Exim is the
> > > better route. For simple handling as well as virus scanning Exiscan-ACL
> > > is the better route. Lots of people just use both.
>
> > Isn't that pretty wasteful?
>
> Depends on what you consider wasteful.
Runs spamc twice. Usually it won't matter, but with higher traffic, the load
will increase for obvious reasons...
--
2. That which causes joy or happiness.
Reply to: