[Mimedefang] Re: Validate users before scanning?
Kelson
kelson at speed.net
Wed May 4 18:47:15 EDT 2005
Tina Marie wrote:
> My logfiles have this (where the real domain is replaced with
> mydomain.org):
>
> May 2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516,
> virus,Worm.Sober.P,209.198.171.148,<postmaster at kirbycorp.com>,
> <3dsandy at mydomain.org>,Your email was blocked
> May 2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516,
> virus,Worm.Sober.P,209.198.171.148,<postmaster at kirbycorp.com>,
> <sandy at mydomain.org>,Your email was blocked
>
> So filter_begin is definately called twice, once for each recipient,
> one valid and one invalid. This pattern is repeated, with varying
> numbers of recipients, all through my logs. I believe there is
> always at least one valid recipient, but I don't really have tools
> to say that for certain.
Actually, a single call to md_graphdefang_log writes one line per
recipient, configurable via the second parameter to
md_graphdefang_log_enable (see man mimedfang-filter).
filter_begin is only called once per message regardless of how many
recipients there are. Since those lines show the same sendmail ID and
the same time, it's just a duplicate log item, not an indication that
the message is being scanned twice.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
More information about the MIMEDefang
mailing list