Theo Julienne wrote: > The speed
issue with virus scanners that are used by, say, Amavis, is that the virus database is loaded _every time_ you get a mail ( because they use the scanner, like kavscanner ). This would obviously make checking at SMTP DATA time useless. However, because this uses kavdaemon, which loads the virus database once, the virus scanning is very fast ( and also extracts all archives without a middle-man amavis setup - even faster ).
In addition to Jeff's comments I would also add that most of the modern mass mailing worms these days can be fairly easily blocked on attachment type. I think its an acceptable compromise in the name of safety to tell mail users they just can't send exes, pifs, scrs, bats (etc) and even if you want to get anal about Mydoom, zips(for a while). That way no virus scanner gets invoked as amavis rejects based on content type well before it gets started. Massive resource saver that.
dave -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
