Consider running clamav-milter as well as MIMEDefang's built-in clamav support. They parse things slightly different ways.
Also, if you have clamav-milter first in your milter list, many viruses will be caught by clamav-milter before they hit MIMEDefang (at least, the DATA filter parts.) This will free up a comparatively large MIMEDefang thread for scanning other email that didn't get caught by clamav-milter.
On the other hand, MIMEDefang can catch some simple, quick, and cheap things before going through the relatively large expense of virus scanning. For example, I'm rejecting messages based on a HELO value of myself at the head of my filter 4 times more often than a virus is caught. Running this one test prior to virus scanning pays large dividends.
Just depends on what you're tuning the system to address.
Charles
_______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
