[Mimedefang] Check extensions beforer virus scan

[Jim McCullars]

On Tue, 27 Jan 2004, Fred Felgenhauer wrote:

> I am having trouble figuring out how to check for bad extensions BEFORE
> doing a virus scan (sweep). I am trying to bounce because of a bad extension
> first
> to avoid the expense of scanning for viruses. No matter what I try, virus
> scanning always
> happens first, anybody doing this?

   In the sample filter, there are two calls to a virus scanner - one in
filter_begin() which calls the "message_contains_virus" function, and
another in filter(), which calls the "entity_contains_virus" function.  If
you want, you could comment out the call in filter_begin(), and then in
filter(), just move the call to check for a virus to below the part that
checks for a bad extension.

   HTH...

Jim McCullars