[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Virus emails

On Tue, Sep 23, 2003 at 12:52:30PM -0700, Steve Lamb wrote:
> > >     Same here though I am sticking with SA-Exim because it saves the mail
> > > in a certain range so I can throw it at the Bayesian classifier.
> > I usually don't have large enough partitions to hold all the spam (!)
>     Certain range.  Here it is things scored between 5 and 8.  5 is where
> things are considered spam.  8 is where I reject things outright.  12 is where
> autolearn is set.  I want to send things in that range to the Bayesian
> classifier so the score would creep up hopefully to the point of being
> rejected.  Comes out to about 1-2 a day.

Even so, on most of my servers the traffic is much higher. :/

> > > It also has the option of teergrubing.
> > I'm a bit scared of turning it on, didn't (see|read) enough documentation
> > for it.
>     Simple concept, if a message scores high enough (25 is default) you just
> string the connection out for 5 minutes.

I'll have to turn that on then.

> > > It's generally accepted that for robust handling of Spam SA-Exim is the
> > > better route.  For simple handling as well as virus scanning Exiscan-ACL
> > > is the better route.  Lots of people just use both.
> > Isn't that pretty wasteful?
>     Depends on what you consider wasteful.

Runs spamc twice. Usually it won't matter, but with higher traffic, the load
will increase for obvious reasons...

     2. That which causes joy or happiness.

Reply to: