I tried moving the virus scanning routines to filter_end after the rejection check (i.e. after return if message_rejected();).
However, I don't believe that fixes the issue because the default action for a bad filename is to drop with warning and I am calling action_quarantine_entire_message. So after I see that the bad_filename is seen, I am still seeing the virus scanner firing and going into the ether. I've also submitted the file to McAfee's Avert and it's bombing that too ;-) Thoughts? KAM > > We don't even WANT rar files and they are blocked in the bad attachment > > list. > > However, we are running the virus scan in filter_begin but the bad_filename > > check in filter & filter_multipart. > > So run the virus scan in filter_end instead. And be sure not to run > it if the message has already been rejected. _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
