[Mimedefang] Re: Validate users before scanning?

Kelson kelson at speed.net
Wed May 4 18:47:15 EDT 2005


Tina Marie wrote:
> My logfiles have this (where the real domain is replaced with
> mydomain.org):
> 
> May  2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516,
> virus,Worm.Sober.P,209.198.171.148,<postmaster at kirbycorp.com>,
> <3dsandy at mydomain.org>,Your email was blocked
> May  2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516,
> virus,Worm.Sober.P,209.198.171.148,<postmaster at kirbycorp.com>,
> <sandy at mydomain.org>,Your email was blocked
> 
> So filter_begin is definately called twice, once for each recipient,
> one valid and one invalid.  This pattern is repeated, with varying
> numbers of recipients, all through my logs.  I believe there is 
> always at least one valid recipient, but I don't really have tools
> to say that for certain.

Actually, a single call to md_graphdefang_log writes one line per 
recipient, configurable via the second parameter to 
md_graphdefang_log_enable (see man mimedfang-filter).

filter_begin is only called once per message regardless of how many 
recipients there are.  Since those lines show the same sendmail ID and 
the same time, it's just a duplicate log item, not an indication that 
the message is being scanned twice.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>



More information about the MIMEDefang mailing list