[Mimedefang] Clamav milter or call from MIMEDefang?
Kelson
kelson at speed.net
Thu Sep 23 13:08:07 EDT 2004
Matthew.van.Eerde at hbinc.com wrote:
> There is actually a good argument for running clamav-milter AND
> calling clamav from MIMEDefang. clamav-milter and MIMEDefang decompose
> the message differently, and MIMEDefang might feed a MIME-part to clamav
> differently than clamav-milter would. This might catch a virus that
> would otherwise slip by. (clamav-milter might catch a virus that
> MIMEDefang would miss, and vice versa.)
Actually, if you use the current example filter and run
message_contains_virus, Clamd will check the individual parts MD has
decoded *and* the entire original message, decomposing it itself --
which accomplishes the same thing. (Assuming you have the right options
set in clamav.conf -- er, clamd.conf for 0.80)
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
More information about the MIMEDefang
mailing list