[Mimedefang] case of multiple virus scanners running

[Mack]

Interesting question....... Has made me think

I currently have the system set for different modes of operation depending on certain factors
"drop entire" or "drop part"

in the drop entire, I scan the msg in filter_begin, and drop it if it contains a virus

in drop part, I scan the msg in filter_begin to see if it contains a virus, (make a note if it's clean or not)
If it's not clean i then scan each individual part so i can drop the offending part (reason for doing this is that scanning every part of every msg uses a lot of resources and takes more time with 3 virus engines running)
if it's marked as clean by the filter_begin scan I don't bother scanning the individual parts.

Am i likely to let anything slip through by doing this ?

or is there a better way of doing it ?


-----Original Message-----
From: mimedefang-bounces at lists.roaringpenguin.com
[mailto:mimedefang-bounces at lists.roaringpenguin.com]On Behalf Of David
F. Skoll
Sent: Wednesday 16 February 2005 12:23
To: mimedefang at lists.roaringpenguin.com
Subject: Re: [Mimedefang] case of multiple virus scanners running


On Tue, 15 Feb 2005, Keith Patton wrote:

> Am I right to assume that if a mail message contains multiple
> attachments that mimedefang could spawn off a virus scan for each
> attachment?

Not unless you do that deliberately in your filter.  And even so, they'd
be sequential scans, not parallel ones.

--
David.
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
MIMEDefang at lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

This Email Has Been Anti-Virus Scanned