On Thu, 19 Jul 2007 at 07:41 -0500, dallase@uribl.com confabulated:

> R.Smits wrote:
>> Matt Kettler wrote:
>>
>>> Tarak Ranjan wrote:
>>>
>>>> greetings,
>>>> i'm getting pdf attached spam. please help me stop that using
>>>> spamassassin...
>>>>
>>>> Horacio_FILE_506292_6906.pdf
>>>>
>>>> /tarak
>>>>
>>>>
>>> The PDFInfo plugin from rulesemporium is designed for this kind of thing.
>>>
>>> http://www.rulesemporium.com/plugins.htm
>>>
>>> Personally, I've been able to keep them under control with good bayes
>>> training, automated training by spamtraps, and a selective greylist, so
>>> I have not yet tried this plugin.
>>>
>>>
>>>

>>
>> Plugin seems to work great, but is it stable enough for big production
>> environments ? Any issues ?
>>
>>

>
> I've heard of no performance problems.. Its only going to run on messages
> with mime parts that it belives contains pdf anyways... so what is that, <1%
> of the time.


No performance issues here. One of our two filter servers see an average
close to three million messages per day. The server has the CPU and
memory. So, SA runs with:

--min-children=10 --max-children=40 --min-spare=20 --max-spare=22

-------
_|_
(_| |