spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Paul Stead <paul.st...@zeninternet.co.uk>
Subject Re: Persistent phishing attacks with word/pdf macros
Date Fri, 14 Oct 2016 13:40:18 GMT
On 14/10/16 14:11, Axb wrote:
> How's the performance. I know you run hi traffic sites.
> Have you felt a difference?
>
> Thanx
>
> Axb

 From the week or so of testing, things seem to be efficient and quick -
not to say there's not efficiencies that could be made with this code.
No discernible difference in scanning time, memory or CPU used.

Here's an example from HitFreqsRuleTiming:

T                OLEMACRO_ZIP_PW    0.0112    0.0112    1
T                OLEMACRO_RENAME    0.0000    0.0000    1
T                OLEMACRO_MALICE    0.0000    0.0000    1
T             OLEMACRO_ENCRYPTED    0.0000    0.0000    1
T                       OLEMACRO    0.0000    0.0000    1

Paul
--
Paul Stead
Systems Engineer
Zen Internet

Mime
View raw message