Hill, Brett wrote:
>> But  I  think  the virusscanning just do this: scan the whole message
> and them forward  it.  So  why  not  handle  an  "Atachment  content
> scan" like virusscanning? Maybe we can use the same data passed to clamd
> and do a content scan.
> 
> Doesn't Virus Scanning only scan the first ?% of a file (not sure what
> the percentage is)?  Since it's a streaming check, I don't think it
> would have to read the whole file attachment in order to know it's a
> virus, spam or whatever, since it's just looking for known signatures.
> Correct me if I'm wrong.

You are correct, it only reads a set amount of the data stream.
The default is 100000 bytes.

Kevin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to