Bill, > Okay, then is there any reason to have amavisd-new break e-mail messages > up for individual parts scanning?
Several virus scanners are not able to decode a MIME structure, or do a poor job at it, or can not decode certain types of archives or encodings. Carefully decoding by amavisd can also protect virus scanners from mail bombs, e.g. recursive archives. MIME and archive decoding also provides information about mail structure and its components to banning rules (file names, file types, mime types), and to a bad MIME-header check. > Would it make sense to disable parts scanning and just have > amavisd-new only pass the entire raw message to clamd for scanning? If you trust your virus scanner, and don't need extra information for banning rules, then sure, you may disable decodings by amavisd. Either disable decoders/dearchivers indvidually by adjusting @decoders list, or turn them off altogether by setting $bypass_decode_parts=1; Now with 2.5.1-pre1, the $bypass_decode_parts=1 also disables MIME decoding by MIME::Parser, and implicitly enables passing of a complete mail to virus scanners, which is what you are asking for. Mark ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
