Re: [Declude.JunkMail] Multi Server Configs

[Matthew Bramble]

Dan, It appears that E-mail is first scanned by the virus scanner (F-Prot or whatever), and then if it passes, the excluded extensions are tested.  So as soon as your virus scanner became Sobig.F aware, the excluded extensions test doesn't get done because it is blocked by the scanner.  Maybe Scott can suggest other ways to save processing power? Scott, I know this is the wrong discussion group, but since we're on the topic, would it make more sense to test for banned extensions before it goes to the virus scanner in order to save processing power? Matt Dan Patnode wrote: Matt, by this: This does tie back into processor utilization though, because before the definitions were available, the banned extension test was placing those E-mails in a hold (wish you could have them deleted).  The system seems though to scan the attachments first and then look for attachments to ban by extension, and that order could be reversed to save processing power.  I assume this because the virus detection is now catching these files subsequent to the definitions update instead of the banned extension test doing the dirty work.  are you saying that I could set up Fprot to scan for .pif files and then have it run before Declude's junk filters, holding/deleting them, saving the CPU from scanning these messages with my junk tests? Can this be confirmed, Scott? Dan