Obvious Spam Allowed Through Due To Pass Oversize Message

[cdvande]

Recently our Untangle's Spam Blocker Lite has been allowing obvious spam through with the following score and action:

Score: 0
Action: pass oversize message [Z]

Our Message Size Limit is set to 262144. The spam emails are only 120k.

Does anyone know why this is happening and what we can do about it? Any help is appreciated.

[cdvande]

Does anyone have any clue why this is happening?

[dmorris]

Pass oversize just means it didn't scan the message because it was over the size limit.
If you want to scan bigger messages you can increase it, there is little harm in doing so.

Generally spam isn't big which is why there is a limit to save resources and scanning large emails.

[cdvande]

Thanks for your reply dmorris, I truly appreciate it!

The messages that are getting through are only 120kb in size. It looks like our Message Size Limit is set to 262144. I assume that number is in bytes, which would mean the spam in question shouldn't be labeled as oversize, correct?

Either way, do you have any recommendation as to what I should increase our message size limit to, in an effort to resolve this issue?

[cdvande]

We are still seeing obvious spam getting through with the "pass oversize message" action. Does anyone have any suggestions on how to fix this or have a recommendation as to what to set our Message Size Limit to (it's currently set to 262144)? Any assistance is appreciated!

[dmorris]

Try setting it to 512k or 1M

[cdvande]

Thanks dmorris. I'll give it a try and let you know my results. Have a great day!