Scanning Order

[Alex Neuman van der Hans]

That last thing is what I've had to do. Implement the ClamAV milter. It
*does* help a bit with CPU usage, like RBL's at the MTA level.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of John Rudd
Sent: Thursday, October 14, 2004 3:19 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Scanning Order

>> > Is there a way to have the Virus and Content scanning happen before
>> > the Spam scanning?

There IS a way to do it (before Julian implements it within the mailscanner
system itself), but it's not real pretty.

Have 2 mailscanner instances (I'm not sure if you can use the multiple queue
system built in to mailscanner or not, but you can do it with 2 mailscanner
installations):

a) sendmail (or whatever your MTA is) deposits into
/var/spool/mqueue.in1 for the first mailscanner

b) the first mailscanner does virus and content checks but not spam checks
and then deposits messages into /var/spool/mqueue.in2 for the 2nd
mailscanner

c) the 2nd mailscanner does spam checks only, and then puts the messages
into /var/spool/mqueue

d) as usual, the sendmail running as a queue processor handles messages that
are in /var/spool/mqueue

I'm not sure if it would actually reduce load or not, though.


OR, you could do virus checks via the sendmail milter, if you're using
sendmail for your MTA.

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).