[EMAIL PROTECTED] wrote:
> We use a series of AV engines to scan emails and have a problem with
> partial mime types being let through the first stage which is Clamav.
> This means they aren't rejected at SMTP time.  Is there a way to get
> Clamav to block these emails?  Remote Outlook Express users seem to be the
> main culprit.

You haven't mentioned what MTA you are using, which makes a big difference as 
to when and what you can use to do rejects during the SMTP session rather than 
accepting and then bouncing.

However, note that ClamAV is a virus scanner, not a MIME analyzer: you should 
be saving the virus-scanning for last because it is fairly expensive, and 
perform MIME defanging or rejection of various content-types via cheaper tools 
like MIMEdefang or amavisd-new, and only run ClamAV on the stuff you accept.

-- 
-Chuck
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to