David wrote:

> Hi,

> So you understand what is happening, our setup currently removes banned 
> extensions but delivers the email body while virus emails are dropped.

Are you using something other than amavisd-new to remove the
attachment?

> Now the question, is it possible to do the virus scan before the banned 
> attachment check?

Virus scans do occur before banned file checks.
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#checks

> We've run in to a case where a virus is sending itself out as a exe 
> attachment.  Because we do not allow exe files to enter our mail system 
> from outside, the exe with the virus is getting removed from the email.  
> While this does block the infected exe from being delivered, the 
> recipient still receives the email(without attachment).  This is causing 
> confusion because the email is in the form of a "From Support" message.

> David f.

It's quite possible the virus is not detected by your anti-virus
software. It happens, that's why I use three different virus scanners
on my system. Even with three, banning still saves me on occasion.

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to