[Mimedefang] TESTVIRUS.org - test question

[Dirk Mueller]

On Saturday 28 February 2004 17:34, Rob wrote:

> The problem is that clamav only enables the mail decoding function if the
> first word of the file passed to it is one of a number of key words.

No, this is not the problem. mimedefang does not pass the original mail to 
ClamAV. it extracts all mime parts, and then calls the virus scanner on those 
files, since not all virus scanners can handle raw mails. The virus scanner 
never actually sees the original, unmodified mail with mimedefang.

So this is a mimedefang-only bug. Not a bug in ClamAV. 

BTW, my workaround for letting ClamAV handle mails directly is to prepend the 
mail with a "From foo at bar.com" before passing it down to clamdscan --mbox. 
This way it will always handle it as email. 

But again, to avoid misunderstandings: this is not needed with mimedefang, 
since mimedefang never runs the virus scanner on the mail itself. 


Dirk