Beta 4.50.4 released -- faster than 4.49

Julian Field MailScanner at ecs.soton.ac.uk
Thu Jan 5 09:29:17 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----


On 4 Jan 2006, at 23:17, Steve Freegard wrote:

> Hi Raymond,
>
> On Wed, 2006-01-04 at 23:40 +0100, Raymond Dijkxhoorn wrote:
>> Hi!
>>
>>> One thing worth mentioning: if you use rcpt splitting (one  
>>> message per
>>> recipient) then you should see a massive speed improvement with  
>>> this version.
>>>
>>> Raymond --- this may help you!
>>
>> Ok. After some thinking :)
>>
>> This works, but! :)
>>
>> Let me try to explain.
>>
>> Spammer sends spam, SA detects, but low spam score. We feed all  
>> those to
>> our analyzer box, analyzer box finds URL thats bad, lists in a RBL...
>>
>> Normally the next messages will have a higher score, since more  
>> URI-BL
>> lists will detect them after a few minutes. Same goes for bayes  
>> scores and
>> so on.
>>
>> Is it a good idea to make it configurable when to use this  
>> feature? Eg,
>> when its high spam? If its high spam i care less about the extra  
>> scores,
>> high is high enough. If its low spam i certainly would be  
>> interested if
>> its not high spam by then. Makes the difference of delivering or  
>> deleting
>> in our case. Some ligic to only cache low spam for lets say 5  
>> mins, and
>> high spam an hour or so would be preferred. Else the detection  
>> will go
>> down and thats bad.
>>
>> Just some idea's, hopefully it helps. Really cool move i think  
>> this. Saves
>> a lot of power, only need to figure out something for the above... to
>> optimize things.
>
> Good idea - treating low/high spam differently in the cache expiry  
> timer
> makes sense - this shouldn't be too difficult to do either.   
> Working out
> the best amount to time to cache each will be trickier though as it
> really depends on how much mail you get.
>
> The way the expiry works at the moment is to expire:
>
> - non-spam after 30mins from the creation of the cache record (to
> account for lag getting onto RBLs/Pyzor/Razor/DCC).
>
> - spam after 6 hours from the initial creation of the cache record.

Steve ---- What say we change 6 hours to 3 hours, and add high-spam  
expiry 6 hours from the "first" time? That should be nothing more  
than 1 change to the expiry function.
Can you work out the SQL for me please?

>
> - virus infected messages after 48 hours from the last cache-hit (to
> give the best possible chance of getting a cache-hit).
>
> These values are configurable in SA.pm at the moment as we didn't  
> think
> it was likely that they would need to be changed.
>
> Kind regards,
> Steve.
>
> --
> Steve Freegard
> Fort Systems Ltd.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.3 (Build 2932)

iQEVAwUBQ7zm7/w32o+k+q+hAQGnNwf+JANWf6onFq+Hree2qRHOMxXlPJ2zd1ID
LeRZGgynttdyynzxMI9EJeA+Y3wQVLvmSuHeQGncoJX9RIu9jzqQdF1wkCFeJteg
Fw3G3hOQO/VqMFDRvqLqi3IPXOdyIZDCLPRmi7PbVHvJAz2uMiV7VbO1uqDVDSXz
NpIugb52t8AZtvdD2rJ34URvbwN1PVJSQqYIlLB7gXnJLyoUI8Ekv3pOIp1w2D0b
P3p5osjHDd8sIr33y+hNzggjOWP5E+G37YQ13TynoivuAlW9dWbFpNJPIpW1fclb
q3/HPNLbFt+Z/sjrgc7DQt5jF/3c5cR1ycBij9EnTDZnyGDYrsxpTg==
=M9zp
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list