Re: [AMaViS-user] AV check on unpacked vs original email.. disadvantage?

2010-02-17 Thread Riaan Kok
Hi Mark, On 16 February 2010 15:21, Mark Martinec mark.martinec+ama...@ijs.si wrote: Since an email relay sits mere seconds away from malware generation, one can accept that not all viruses would get caught..  I've however heard reports from downstream that a next relay in line is catching

Re: [AMaViS-user] AV check on unpacked vs original email.. disadvantage?

2010-02-17 Thread Mark Martinec
Riaan, @keep_decoded_original_maps = (new_RE( qr'^MAIL$', # retain full original message for virus checking qr'^MAIL-UNDECIPHERABLE$', # recheck full mail if it contains.. qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i, )); A-ha! Thanks for that.. We're still a couple

[AMaViS-user] AV check on unpacked vs original email.. disadvantage?

2010-02-16 Thread Riaan Kok
Hi folks, Since an email relay sits mere seconds away from malware generation, one can accept that not all viruses would get caught.. I've however heard reports from downstream that a next relay in line is catching some viruses that got missed by our amavisd-new setup. Also using ClamAV. Now,

Re: [AMaViS-user] AV check on unpacked vs original email.. disadvantage?

2010-02-16 Thread Mark Martinec
Riaan, Since an email relay sits mere seconds away from malware generation, one can accept that not all viruses would get caught.. I've however heard reports from downstream that a next relay in line is catching some viruses that got missed by our amavisd-new setup. Also using ClamAV.