Max file size

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It's called
Max Spam Check Size = 200k
in the default MailScanner.conf file.

Guy Story KC5GOI wrote:
> Matt, I did add the EICAR at the end of my test text file.  Based on
> your suggestion I moved it to the top of the text file and that was
> stopped.  Putting the EICAR in the middle kept it from getting caught.
> I increased the Max SpamAssassin Size parameter from 30000 to 300000 and
> that did not clear the error message.  I will keep looking.
>
> Jeff mentioned looking for "Max Spam Check Size ="  I could not find
> that entry in my MailScanner.conf file.  That was also the parameter
> that my Google searches refered to.  If it is not present, is that the
> default setting?
>
> Matt Kettler wrote:
>   
>> Guy Story KC5GOI wrote:
>>     
>>> I have a max file size question. I am getting " is too big for spam
>>> checks (2090980 > 150000 bytes) " A search of mailscanner.conf does not
>>> find the vaule 150000.
>>>       
>> This should be the "Max SpamAssassin Size" option, which, AFAIK, should
>> only apply to SpamAssassin, not AV scanning.
>>
>>     
>>> I read a few posts I found after using google and
>>> they indicate this is not an issue. I added the EICAR to a 175k text
>>> file. It was flagged as too big for spam scanning and the AV scanning
>>> did not happen.
>>>       
>> Are you sure your AV would detect the resulting file as a virus?
>>
>> I tried pre-pending it to a 400k file, and MailScanner found it just fine.
>>
>> Appending it to the same file, it was not detected.
>>
>> HOWEVER, copying this same file to my server and manually running all of
>> AV scanners on it (bitdefender, clamav, command av) did not detect a
>> virus either. Apparently most AV products will only detect eicar if it's
>> at the beginning of the file. (This is probably to reduce FP's)
>>     
>
>
>   

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.7.0 (Build 1012)
Comment: (pgp-secured)
Charset: ISO-8859-1

wj8DBQFHflKrEfZZRxQVtlQRAoaBAJ9mlbSWCv1121h3usEYPtZaO0j4+wCcCKKj
qJAb5H/karwWXUv6FyLIY/k=
=F8CR
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.