[Mimedefang] case of multiple virus scanners running
roaringpenguin.com at bass-speaker.com
Wed Feb 16 07:36:34 EST 2005
Interesting question....... Has made me think
I currently have the system set for different modes of operation depending on certain factors
"drop entire" or "drop part"
in the drop entire, I scan the msg in filter_begin, and drop it if it contains a virus
in drop part, I scan the msg in filter_begin to see if it contains a virus, (make a note if it's clean or not)
If it's not clean i then scan each individual part so i can drop the offending part (reason for doing this is that scanning every part of every msg uses a lot of resources and takes more time with 3 virus engines running)
if it's marked as clean by the filter_begin scan I don't bother scanning the individual parts.
Am i likely to let anything slip through by doing this ?
or is there a better way of doing it ?
From: mimedefang-bounces at lists.roaringpenguin.com
[mailto:mimedefang-bounces at lists.roaringpenguin.com]On Behalf Of David
Sent: Wednesday 16 February 2005 12:23
To: mimedefang at lists.roaringpenguin.com
Subject: Re: [Mimedefang] case of multiple virus scanners running
On Tue, 15 Feb 2005, Keith Patton wrote:
> Am I right to assume that if a mail message contains multiple
> attachments that mimedefang could spawn off a virus scan for each
Not unless you do that deliberately in your filter. And even so, they'd
be sequential scans, not parallel ones.
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
MIMEDefang at lists.roaringpenguin.com
This Email Has Been Anti-Virus Scanned
More information about the MIMEDefang