[Mimedefang] Clamav milter or call from MIMEDefang?

Nels Lindquist nlindq at maei.ca
Thu Sep 23 18:29:49 EDT 2004


On 23 Sep 2004 at 9:00, Matthew.van.Eerde at hbinc.com wrote:

<snip>

> If you want to save resources on your box, run clamav-milter FIRST. 
> This will save an expensive SpamAssassin call.

How so?  The default filter already avoids calling SA if the message 
has been marked for discard or rejection, which are the two most 
common dispositions for virus-bearing messages (the default filter 
discards them).

<snip>

> Consider using FEATURE(enhdnsbl) in sendmail to reject email from
> blacklisted sources early.

There are pros and cons.  DNSBLs aren't nearly as accurate when used 
as single metrics for rejection, rather than being included in the SA 
score calculation.  You end up with a lot more incorrectly rejected 
mail that way.

<snip>

> There is actually a good argument for running clamav-milter AND
> calling clamav from MIMEDefang.  clamav-milter and MIMEDefang
> decompose the message differently, and MIMEDefang might feed a
> MIME-part to clamav differently than clamav-milter would.

That hasn't been true since the introduction of 
md_copy_orig_msg_to_work_dir in MD 2.42.

----
Nels Lindquist <*>
Information Systems Manager
Morningstar Air Express Inc.



More information about the MIMEDefang mailing list