Why is MS doing spam checks first?

Christiaan den Besten chris at scorpion.nl
Thu Dec 1 15:58:03 GMT 2005


    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

> This old chestnut...

Hi, we had a different scenario with the latest Sober outbreak the other day. People got 'bounces' due to non-allowed file-extention 
(.exe).

a) They got a message bounced, but the 'From' was offcourse fake.
b) The (incorrect) bounce contained a virus because it was not yet scanned.

Usually this does not occur because messages are virus scanned on our edge smtp relay's before hitting the spam/attachment relay's. 
But due to some timing constraint the edge relay's AV-engine's did not yet recognise the 'new' virus ....

I know it has been discussed over and over .. and (having read the source some time ago ... ) I know it's a mayor switch, but 
it -is- viable for some to have an other priority in which order scanning, bouncing on illegal attachment etc is done .....

bye,
Chris
 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list