[Mimedefang] Clamav milter or call from MIMEDefang?

[Kelson]

Matthew.van.Eerde at hbinc.com wrote:
> There is actually a good argument for running clamav-milter AND 
> calling clamav from MIMEDefang.  clamav-milter and MIMEDefang decompose
> the message differently, and MIMEDefang might feed a MIME-part to clamav
> differently than clamav-milter would.  This might catch a virus that
> would otherwise slip by.  (clamav-milter might catch a virus that
> MIMEDefang would miss, and vice versa.)

Actually, if you use the current example filter and run 
message_contains_virus, Clamd will check the individual parts MD has 
decoded *and* the entire original message, decomposing it itself -- 
which accomplishes the same thing.  (Assuming you have the right options 
set in clamav.conf -- er, clamd.conf for 0.80)

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>