Is there anyway to track down what is causing this? I have asl installed and everything is up to date. One thing I have noticed is that there always seems to be an attachment on these though not all messages with attachments get this. What would be the best way to determine what is going on here?
Do those messages have attachments? There is a file size limit in qmail-scanner/spamassassin which set the max size for message scanning - and that's what I see when message go over - can't remember the exact file/settings to adjust, but generally spam falls under this threshold so it's not a problem.
Yes, these do have attachments. The problem is that some of these are spam messages and the attachments aren't too big. I will find one of the messages and see how big the attachment is and report back.
OK, I just looked at one and it didn't have any attachments. It was an email with different mime types. The html wanted pictures downloaded and then the txt part just had some spam text in it. Is there anyway to tell what rule caused spamassassin to not scan?
I have figured out that it is the message size that is causing this. All messages that come in like this are above 250k (the default I think). Does anyone know how to raise that limit? I am getting quite a few spam messages that are between 250k and 300k.
There is a max scan size option in either qmail-scanner or spamassassin (possibly in /etc/qmail-scanner.ini) sorry can't remember exactly and I'm away from office PC/notes at the moment - I'll check tomorrow.
Troy - did you get this figured out? I'm having the same problem! A particular class of HTML emails with "Content-Type: image/jpeg" parts are getting past SA without SA doing any checking (the SA headers are missing from the email).
No, I never figured this out. The issue wasn't really too big of a problem for me and I just got too busy to look into it anymore. I think I did see the setting Kalimari is talking about, but can't really remember where.
