Why is MS doing spam checks first?
Christiaan den Besten
chris at scorpion.nl
Thu Dec 1 15:58:03 GMT 2005
[ The following text is in the "iso-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
> This old chestnut...
Hi, we had a different scenario with the latest Sober outbreak the other day. People got 'bounces' due to non-allowed file-extention
(.exe).
a) They got a message bounced, but the 'From' was offcourse fake.
b) The (incorrect) bounce contained a virus because it was not yet scanned.
Usually this does not occur because messages are virus scanned on our edge smtp relay's before hitting the spam/attachment relay's.
But due to some timing constraint the edge relay's AV-engine's did not yet recognise the 'new' virus ....
I know it has been discussed over and over .. and (having read the source some time ago ... ) I know it's a mayor switch, but
it -is- viable for some to have an other priority in which order scanning, bouncing on illegal attachment etc is done .....
bye,
Chris
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list