Messages with multiple recipients not being scanned

[Martin Hepworth]

Gib

you mentioned somewhere in a post that you are seeing timeouts on SA.

you need to look at the rules and rbls you are using inside SA.

I'd start turning off any RBL's you are using 1 by 1 and seeing if that
helps.

Also if you are using any of of the mid/bigevil.cf/ badnumbers.cf etc
you might want to think about moving to the surbl.org URI checker instead.

NB IF you are using the bigevil.cf  (and a rulesdujour type daily
updateer) the maintainer posted a message on the sa-users email list
with a heads up to say it was about to increase massively. Now I had to
move off bigevil a while ago as it was killing my system, so this recent
increase might have pushed you over the edge of performance on your machine


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Gib Gilbertson Jr. wrote:
> Hi.
>
> I've been getting more and more spam of late and noticed that MailScanner
> is not scanning most of these. They have the "Unscanned Header Value"
> attached to them. These e-mails are addressed to many recipients and appear
> to get through unscanned because one of the recipients is on the whitelist.
>
> I remember reading on the list at some point in time about having to do
> something to make sendmail or MailScanner treat each recipient as an
> individual e-mail, I've tried going through the archives but can't seem to
> find the thread.
>
> Running the following:
>
> FreeBSD 4.10
> MailScanner 4.26.8
> SpamAssassin 2.63
> ClamAV .72
>
> Thanks for any help you can give.
>
> gib
>
>
>      Gib Gilbertson Jr.
>     Tierramiga Info Systems
>      619-287-8647 Support
>      http://www.tmisnet.com
>      San Diego's "Friendly ISP"
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html