[Mimedefang] TESTVIRUS.org - test question

[David F. Skoll]

On Sat, 28 Feb 2004, Rob wrote:

> I would say that the problem is that MD only does part of the job of
> extracting parts.  Rather than fully decoding the email it does a
> half-hearted job (and no, I'm not having a go - it's a design choice I can
> fully understand).  This means that any smart scanners get only part of the
> story.  Ideally MD would not just pass the decoded parts but the original
> email, as is, to the scanner.  There would be some overhead, but it's better
> than the current situation.

It's pretty easy -- before you call message_contains_virus, put this in
your filter:

	copy_or_link("./INPUTMSG", "./Work/INPUTMSG");

This ensures that the original raw message is sitting in Work/, ready
for scanning.  You might need to give the virus scanner special options
to get it to decode a mail message, but it's not too hard.

--
David.