[Mimedefang] Virus scanning messages vs. attachments
Kevin A. McGrail
KMcGrail at PCCC.com
Sat Nov 19 09:11:33 EST 2011
On 11/18/2011 7:27 PM, Philip Prindeville wrote:
> On 11/18/11 9:09 AM, Kevin A. McGrail wrote:
>> The extra checks in MD combined with things like bad file parts, etc.
>> has really helped stop emerging viruses before traditional scanner
>> signatures are updated. I would recommend the solution remain as-is.
> Yeah, my interest is in seeing the remaining parts of the message and delivering it anyway, rather than just bouncing it.
> Sometimes it's useful to contact the sender and let him/her know they have a compromised machine.
I had to write a 32K virus per day patch for the quarantine routine and
my server isn't that large. You clearly are too bored ;-)
More information about the MIMEDefang