[Mimedefang] Check extensions beforer virus scan

Bryan Stansell bryan at stansell.org
Tue Jan 27 18:58:11 EST 2004


On Tue, Jan 27, 2004 at 03:20:12PM -0800, Kelson Vibber wrote:
> Alternatively, remove the calls in filter_begin, then
> entity_contains_virus out of the "if ($FoundVirus)" block.  On one
> hand, you do scan each entity individually.  On the other, you don't
> scan anything that you're already deleting.

yeah, since i'm using clamd, there really is no penalty for checking the
parts on their own (and only if they pass the other checks).  if i was
using a non-daemon scanner, i see the benefit of cranking it off in
filter_begin() to prevent the overhead of reading the virus definitions,
etc for each part in filter().  for clamd, the filter_begin() check just
seems to be overhead.

thanks for all the feedback...it helped get my head straight.  ;-)

Bryan



More information about the MIMEDefang mailing list