[Mimedefang] Re: running virus scanning before spam filtering

[Jeremy Mates]

* Lucas Albers <admin at cs.montana.edu>
> The default is to run spam filtering before virus scanning.

Really? The example mimedefang-filter checks with virus scanners in
filter_begin and filter, and only calls SpamAssassin afterwards in
filter_end if the message has not been rejected.

> Any particular reason why you should not run virus scanning before
> spam filtering? Not difficult to accomplish, just wondering if it
> makes sense to do so. Spam filtering is a less expensive operation
> then virus scanning...

My opinion is that virus scanning should be done before spam scanning,
as viruses represent a security threat, and should be detected and
handled as soon as possible.

How do you know spam filtering is less expensive? What spam filtering
are you doing, compared with what virus checks?