<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>The setting you need is in MailScanner.conf and is "Max Spam
Check Size" .<br>
</p>
<div class="moz-cite-prefix">On 6/13/22 05:13, PenguinWhispererThe
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CACtG2e0fFUaeaXba7vjy+y9sbFbMOquJ92dS6vhOm1AJ=AaXOw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Anyone has ideas about this?</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, 9 Jun 2022 at 16:37,
PenguinWhispererThe <<a
href="mailto:th3penguinwhisperer@gmail.com"
moz-do-not-send="true" class="moz-txt-link-freetext">th3penguinwhisperer@gmail.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Hi all,
<div><br>
</div>
<div>I am using Mailscanner with Mailwatch.</div>
<div>In Mailwatch I see messages are marked as OK while I'd
have expected it to be caught (I'm aware not all spam can
be caught though). However spam messages get often
through. It seems like basically 50% of spam is a false
negative.</div>
<div><br>
</div>
<div>So I looked a bit how I can improve this.</div>
<div><br>
</div>
<div>In Mailwatch I see at the bottom:</div>
<div>Spam Report: Score: "large" Matching Rule: "too"</div>
<div>SpamAssassin score is 0. Size is e.g. 257kb. Almost all
spam that gets through is like this.<br>
</div>
<div><br>
</div>
<div>The domain in the TO field in the headers is not one of
the domains that my mailserver handles which is confusing.
(not an open relay though, but I do have some kind of
catchall: *@<a href="http://example.com" target="_blank"
moz-do-not-send="true">example.com</a> goes to the same
mailbox apart from some exceptions)</div>
<div><br>
</div>
<div>Now from my interpretation of what I see in Mailscanner
the message is not being sent through SpamAssassin since
the message size is too big and so it uses 0 as the score.
Is that correct?</div>
<div><br>
</div>
<div>I have looked into the Maximum Message Size setting:</div>
<div>Maximum Message Size =
%rules-dir%/max.message.size.rules<br>
</div>
<div><br>
</div>
<div>And in this rule file I only have this:</div>
<div>FromOrTo: default 0<br>
</div>
<div><br>
</div>
<div>This is the default. I looked at the other samples in
that file but they actually do set a limit while 0 seems
to be "no limit". So I don't understand why these bigger
messages are skipped while for smaller ones SA is invoked
and seems to work properly.</div>
<div><br>
</div>
<div>Anyone who can lead me in the right direction?
Suggestions? Ideas?</div>
<div><br>
</div>
<div>Thanks!</div>
</div>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
</body>
</html>