[Mimedefang] Clamav milter or call from MIMEDefang?
Nels Lindquist
nlindq at maei.ca
Thu Sep 23 18:29:49 EDT 2004
On 23 Sep 2004 at 9:00, Matthew.van.Eerde at hbinc.com wrote:
<snip>
> If you want to save resources on your box, run clamav-milter FIRST.
> This will save an expensive SpamAssassin call.
How so? The default filter already avoids calling SA if the message
has been marked for discard or rejection, which are the two most
common dispositions for virus-bearing messages (the default filter
discards them).
<snip>
> Consider using FEATURE(enhdnsbl) in sendmail to reject email from
> blacklisted sources early.
There are pros and cons. DNSBLs aren't nearly as accurate when used
as single metrics for rejection, rather than being included in the SA
score calculation. You end up with a lot more incorrectly rejected
mail that way.
<snip>
> There is actually a good argument for running clamav-milter AND
> calling clamav from MIMEDefang. clamav-milter and MIMEDefang
> decompose the message differently, and MIMEDefang might feed a
> MIME-part to clamav differently than clamav-milter would.
That hasn't been true since the introduction of
md_copy_orig_msg_to_work_dir in MD 2.42.
----
Nels Lindquist <*>
Information Systems Manager
Morningstar Air Express Inc.
More information about the MIMEDefang
mailing list