Charles wrote:
> I'm rejecting messages based on a HELO value of myself at the head of
> my filter 4 times more often than a virus is caught.  Running this one
> test prior to virus scanning pays large dividends. 

I believe the sequence is this:

Connection
        clamav-milter called - doesn't do anything
        MIMEDefang called - does one particular routine only
HELO or EHLO
        clamav-milter called - doesn't do anything
        MIMEDefang called - does one particular routine only
RCPT
        clamav-milter called - doesn't do anything
        MIMEDefang called - does one particular routine only
DATA
        clamav-milter called - scans virus
        MIMEDefang called - does filter_begin, filter * N, filter_end

If you block via MIMEDefang in the HELO phase, then clamav-milter never does 
anything.

Matthew.van.Eerde (at) hbinc.com                 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com         Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg," 

_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to