Patrick,

> When amavisd hands over a message to an anti-spam filter or a virus filter,
> which does it give the message first? Virus or Spam?

See
  http://www.ijs.si/software/amavisd/amavisd-new-docs.html#checks

As it is currently implemented, virus checking is performed before spam 
checks, but this should not be relied upon. All that amavisd promises
is that it will give precedence to virus verdict before spam,
regardless of how it obtained its results.

Actualy the precedence goes:
  CC_VIRUS
  CC_BANNED
  CC_UNCHECKED
  CC_SPAM
  CC_SPAMMY
  CC_BADH
  CC_OVERSIZED
  CC_MTA
  CC_CLEAN

Nowadays when virus checkers grew some anti-spam capabilities (like 
antiphishing rules in ClamAV), and when SpamAssassin has some (limited)
antivirus capabilities, the distinction between both types of checks
is getting fuzzier.

  Mark

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to