[Mimedefang] log which virusscanner found a virus

Cormack, Ken Ken.Cormack at Roadway.com
Thu Jun 23 14:17:55 EDT 2005


-----Original Message-----
From: Matthew.van.Eerde at hbinc.com [mailto:Matthew.van.Eerde at hbinc.com] 

> Possible solutions to more fairly treat each scanner:
> * randomize the order that message_contains_virus calls scanners
> * call all scanners for all messages - even if the first scanner found a
virus, call the others - and log all "find"s for each message_contains_virus
call

I have no interest in randomizing the order in which my different scanners
run.  My concern was to use the fastest scanners first (those that are
already memory resident) before calling any externally-loaded binaries.  As
shown, I am better able to justify to management the effectiveness of the
free scanners by showing a lower ROI for their investment in a commercial
scanner (all the while, imposing a lighter load on my systems, and yet still
giving management the "warm-fuzzy" that they get from running a
commercially-supported product - something they seem to find necessary in
this day of SCO lawsuits and legal shyness with regard to Open Source in
general.)

Ken



More information about the MIMEDefang mailing list