[Mimedefang] Virus scanning messages vs. attachments

Kevin A. McGrail KMcGrail at PCCC.com
Sat Nov 19 09:11:33 EST 2011


On 11/18/2011 7:27 PM, Philip Prindeville wrote:
> On 11/18/11 9:09 AM, Kevin A. McGrail wrote:
>
>> The extra checks in MD combined with things like bad file parts, etc.
>> has really helped stop emerging viruses before traditional scanner
>> signatures are updated.  I would recommend the solution remain as-is.
> Yeah, my interest is in seeing the remaining parts of the message and delivering it anyway, rather than just bouncing it.
>
> Sometimes it's useful to contact the sender and let him/her know they have a compromised machine.
I had to write a 32K virus per day patch for the quarantine routine and 
my server isn't that large.  You clearly are too bored ;-)

Regards,
KAM



More information about the MIMEDefang mailing list