[xmail] Re: Post data filter
I had some trouble scanning larger messages with filters.post-data, so I opted to scan anything = 1MB with post-data and anything 1MB with filters.in. --John Rob Arends wrote: IIRC pre/post-data filters only work on incoming smtp (someone correct me if wrong) So it is a perfect place to AV your mail once. Rob :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matic Sent: Tuesday, August 30, 2005 9:55 PM To: xmail@xmailserver.org Subject: [xmail] Post data filter Is the filters.post-data.tab the right place to put in a virus scanner? This way all mail (incoming to local accounts and outgoing from my users) will be scaned and only once if the mail is sent to local list or many recipients. Am I correct? Any reason why it shouldn't be put in filters.post-data.tab? Matic - To unsubscribe from this list: send the line unsubscribe xmail in the body of a message to [EMAIL PROTECTED] For general help: send the line help in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Post data filter
--- Matic wrote: Is the filters.post-data.tab the right place to put in a virus scanner? Hi. I think so. I think it is the right place because XMail will close the session imediatelly. If we use filters.in/out.tab and a sender writes a message to N recipients, XMail will process N messages and generate N bounce messages if a virus is found. This way all mail (incoming to local accounts and outgoing from my users) will be scaned and only once if the mail is sent to local list or many recipients. Am I correct? Yes, I believe you are. Any reason why it shouldn't be put in filters.post-data.tab? The smtp session will be longer. So, maybe you will need to raise the max number of smtp threads. I use clamd (ClamAV) and clamdscan. It is fast enough. __ Converse com seus amigos em tempo real com o Yahoo! Messenger http://br.download.yahoo.com/messenger/ - To unsubscribe from this list: send the line unsubscribe xmail in the body of a message to [EMAIL PROTECTED] For general help: send the line help in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Post data filter
Leonardo, Sorry to go off topic here, but have you tried the tests at: http://www.webmail.us/testvirus Using clamdscan in post-data, what tests to you fail on, if any? Leonardo Fogel wrote: The smtp session will be longer. So, maybe you will need to raise the max number of smtp threads. I use clamd (ClamAV) and clamdscan. It is fast enough. - To unsubscribe from this list: send the line unsubscribe xmail in the body of a message to [EMAIL PROTECTED] For general help: send the line help in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Post data filter
--- John Kielkopf wrote: Sorry to go off topic here, but have you tried the tests at: http://www.webmail.us/testvirus Using clamdscan in post-data, what tests to you fail on, if any? Oops. I forgot to mention that in my previous mail. It fails tests #5, 12, 16 and 24. Thankfully, the antivirus in the workstation (NOD32) detects them all. ___ Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! http://br.acesso.yahoo.com/ - To unsubscribe from this list: send the line unsubscribe xmail in the body of a message to [EMAIL PROTECTED] For general help: send the line help in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Post data filter
Leonardo Fogel wrote: --- John Kielkopf wrote: Sorry to go off topic here, but have you tried the tests at: http://www.webmail.us/testvirus Using clamdscan in post-data, what tests to you fail on, if any? Oops. I forgot to mention that in my previous mail. It fails tests #5, 12, 16 and 24. Thankfully, the antivirus in the workstation (NOD32) detects them all. Darn. I was hoping you found a more elegant solution to those. Currently, I get around #5, 12 16 by building a new tmp file, including only what follows MAIL-DATA, adding a Return Path: header to the top, and correcting any bad EOH (no separation between the message body and header) I find. Unfortunately, this takes longer than the virus scan itself, if the message is large. 23 24 doesn't contain an actual virus, so I can't expect ClamAV to catch them. - To unsubscribe from this list: send the line unsubscribe xmail in the body of a message to [EMAIL PROTECTED] For general help: send the line help in the body of a message to [EMAIL PROTECTED]
