Max Spam Check Size

Wed Dec 13 21:02:32 UTC 2017

Hi, 

All spam is copier/Multifunctional or invoice related 

Dec 13 16:56:47 mail MailScanner[3834]: Message CF27C20D53.A51AA from 82.192.71.78 (copier at domain.nl) to basecamp.nl is too big for spam checks (214959 > 200000 bytes) 
Dec 13 16:58:09 mail MailScanner[2970]: Message ED3EB20D3F.A88E7 from 176.13.233.133 (copier at domain.eu) to domain.eu is too big for spam checks (214724 > 200000 bytes) 
Dec 13 16:59:41 mail MailScanner[2970]: Message 4849720D3F.A8816 from 110.172.163.179 (copier at domain.nl) to domain.nl is too big for spam checks (214691 > 200000 bytes) 
Dec 13 17:04:37 mail MailScanner[2970]: Message DEF3B20D3F.A5D67 from 82.192.71.78 (copier at domain.nl) to domain.nl is too big for spam checks (214888 > 200000 bytes) 
Dec 13 17:15:01 mail MailScanner[4134]: Message A9C9A20D3F.A393A from 89.25.31.28 (copier at domain.nl) to domain.nl is too big for spam checks (214698 > 200000 bytes) 
Dec 13 17:21:14 mail MailScanner[4005]: Message 540FE20D3F.AEE35 from 189.210.117.137 (copier at domain.nl) to domain.nl is too big for spam checks (214864 > 200000 bytes) 
Dec 13 17:39:26 mail MailScanner[3127]: Message CB8F720D53.A312A from 82.192.71.78 (copier at domain.net) to domain.net is too big for spam checks (215035 > 200000 bytes) 
Dec 13 17:54:40 mail MailScanner[4617]: Message 54DAB20D53.A8091 from 37.47.229.229 (copier at domain.nl) to domain.nl is too big for spam checks (214877 > 200000 bytes) 
Dec 13 17:57:59 mail MailScanner[4738]: Message CE17220D53.AF738 from 202.84.45.219 (copier at domain.net) to domain.net is too big for spam checks (214786 > 200000 bytes) 
Dec 13 17:59:21 mail MailScanner[4738]: Message 2264F20D53.A7D19 from 82.192.71.78 (copier at domain.eu) to domain.eu is too big for spam checks (214860 > 200000 bytes) 
Dec 13 18:16:41 mail MailScanner[4134]: Message AAB0D21667.A71F6 from 171.233.171.251 (copier at domain.nl) to domain.nl is too big for spam checks (214711 > 200000 bytes) 
Dec 13 18:17:11 mail MailScanner[4005]: Message 99A1821667.A92BF from 176.63.29.102 (copier at domain.nl) to domain.nl is too big for spam checks (214880 > 200000 bytes) 
Dec 13 18:56:05 mail MailScanner[4617]: Message EC95C20D53.A8CAB from 82.192.71.78 (copier at domain.nl) to domain.nl is too big for spam checks (214864 > 200000 bytes) 
Dec 13 19:14:48 mail MailScanner[5409]: Message 512F220D53.AF28C from 207.248.63.90 (copier at domain.nl) to domain.nl is too big for spam checks (214792 > 200000 bytes) 
Dec 13 19:20:21 mail MailScanner[5409]: Message 6920C2046F.A09D9 from 117.2.35.204 (copier at domain.nl) to domain.nl is too big for spam checks (214682 > 200000 bytes) 
Dec 13 19:24:25 mail MailScanner[4617]: Message D1700202B3.A7F9E from 82.192.71.78 (copier at domain.nl) to basecamp.nl is too big for spam checks (215028 > 200000 bytes) 
Dec 13 19:35:51 mail MailScanner[4617]: Message 0CBF2202B3.A86F1 from 82.192.71.78 (copier at domain.nl) to domain.nl is too big for spam checks (214886 > 200000 bytes) 
Dec 13 19:44:23 mail MailScanner[5409]: Message EE48C202B3.A7824 from 84.215.234.197 (copier at domain.nl) to domain.nl is too big for spam checks (214852 > 200000 bytes) 
Dec 13 19:47:05 mail MailScanner[4617]: Message DAD11202B3.ABEF9 from 42.113.161.32 (copier at domain.nl) to domain.nl is too big for spam checks (214672 > 200000 bytes) 
Dec 13 19:57:20 mail MailScanner[4738]: Message ACDE1202B3.ABFD0 from 171.61.234.53 (copier at domain.nl) to domain.nl is too big for spam checks (214877 > 200000 bytes) 
Dec 13 19:59:48 mail MailScanner[5409]: Message 2CB60202B3.A18C4 from 147.236.232.253 (copier at domain.de) to domain-in.de is too big for spam checks (214775 > 200000 bytes) 
Dec 13 20:04:56 mail MailScanner[5409]: Message 8D3BF2029A.ABC89 from 181.168.144.20 (copier at domain.net) to domain.net is too big for spam checks (214836 > 200000 bytes) 
Dec 13 20:09:50 mail MailScanner[5873]: Message 76E5E2029A.AD1D5 from 1.52.38.2 (copier at domain.nl) to domain.nl is too big for spam checks (214642 > 200000 bytes) 
Dec 13 20:43:18 mail MailScanner[5409]: Message E966420D3F.AA8FD from 171.234.152.170 (copier at domain.eu) to domain.eu is too big for spam checks (214684 > 200000 bytes) 
Dec 13 20:46:01 mail MailScanner[5687]: Message 81FDE2028C.A7B2D from 82.192.71.78 (copier at domain.nl) to domain.nl is too big for spam checks (214907 > 200000 bytes) 
Dec 13 20:50:32 mail MailScanner[7956]: Message 06BFA20277.A2CFB from 109.99.145.86 (copier at domain.nl) to domain.nl is too big for spam checks (214680 > 200000 bytes) 

Met vriendelijke groet, Best regards, 

Thom van der Boon 
E-Mail: thom at vdb.nl 

===== 

Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 

Van: "Antony Stone" <Antony.Stone at mailscanner.open.source.it> 
Aan: "MailScanner Discussion" <mailscanner at lists.mailscanner.info> 
Verzonden: Woensdag 13 december 2017 21:43:42 
Onderwerp: Re: Max Spam Check Size 

On Wednesday 13 December 2017 at 21:34:54, Thom van der Boon wrote: 

> Hi 
> 
> I am currently experiencing quite some spam messages which are not caught 
> by MailScanner (about one every 5 minutes) because of the "Max Spam Check 
> Size" parameter in MailScanner.conf 

> After reviewing the log files, all messages which are uncaught have a size 
> between 200k and 225k (most arround 215k) and look to be targeted to get 
> past a MailScanner installation 

Would you care to pastebin a sample of such spam (I'm asuming they all 
resemble one another, and aren't completely different messages which happen to 
share a common size range) so the rest of us can see whether we're seeing 
similar stuff? 

Thanks, 

Antony. 

-- 
"If I've told you once, I've told you a million times - stop exaggerating!" 

Please reply to the list; 
please *don't* CC me. 

-- 
MailScanner mailing list 
mailscanner at lists.mailscanner.info 
http://lists.mailscanner.info/mailman/listinfo/mailscanner 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20171213/b0b4e132/attachment.html>