It's generally considered to be good practice to configure size limits on
messages at the MTA level.  Logcheck should have the ability to limit the
size of its generated to comply with such limits.  I'd propose that it
should be configurable via logcheck.conf (rather than trying to autodetect
it or something like that).  Ideally logcheck would split the message
across multiple emails if it has more data to send, but even just
truncating the message, with a warning, is probably better than the
current behavior of generating a message that the SMTP server won't
accept.

Thanks for maintaining logcheck!

noah

This seems like a good idea - i dont think mime-construct has
functionality to split the mail, but we could detect very
long messages before sending and report an error - and perhaps leave
the file for local inspection.

one to consider post bookworm