[SA-exim] Large messages

[Peter N Lewis]

If a large message comes it, SA-exim truncates it to 250k so that 
spamc will process it.  The problem with his is that if the message 
contains a large MIME attachment, then the MIME_MISSING_BOUNDARY (3.9 
-- RAW: MIME section missing boundary) test will be activated, and 
since it is weighted at 3.9 the message will likely be flagged as 
spam even though it probably is not.

Any suggestions on how to handle this?

I can think of a few, but the only really good solution is for 
spamassassin to realize that the message has been truncated and not 
apply the MIME_MISSING_BOUNDARY check, and I'm not sure how to 
accomplish that.

I could weight down the MIME_MISSING_BOUNDARY check to something less 
violent.  This is probably the best solution as I just checked and of 
the twenty or so spam messages where it did fire, it was not needed 
to mark the message as spam in any of them (only one was even close, 
the rest were often 20+).

I could disable spam checking for large messages (I think if I just 
increase the samaxbody in sa_exim.c without any other changes, spamc 
will return the message unprocessed).  Spam seems to hardly ever be 
large anyway, and since I deliver the message regardless, it probably 
wouldn't be much of an issue.

Anyway, I mostly just figured I'd mention this in case anyone else 
bumps in to it (hopefully before some large attachment is erroneously 
refused delivery).

Enjoy,
    Peter.


-- 
<http://www.interarchy.com/>  <http://download.interarchy.com/>