Suggestion to speed MailScanner up

[Martin.Hepworth]

Carlos

Not a good idea. Even if it's spam you need to check if there's a virus
in there so you don't release malware by accident.

AV checks are quite quick in comparison to Spamassassin checks..assuming
you're doing SA which it doesn't look like you are..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Carlos Pastorino
> Sent: 07 February 2007 01:30
> To: mailscanner at lists.mailscanner.info
> Subject: Suggestion to speed MailScanner up
>
> I have noticed that MailScanner checks for viruses even if the spam
> has been marked for deletion.
>
> Here's one example:
>
> Feb  6 01:20:03 mailserver MailScanner[3368]: New Batch: Scanning 1
> messages, 1655 bytes
> Feb  6 01:20:03 mailserver MailScanner[3368]: Spam Checks: Starting
> Feb  6 01:20:04 mailserver MailScanner[3368]: RBL checks:
> 0338C2C0F7.99CBE found in SORBS-DNSBL, SBL+XBL, spamhaus-XBL,
> spamcop.net
> Feb  6 01:20:04 mailserver MailScanner[3368]: Message 0338C2C0F7.99CBE
> from 219.150.57.14 (xpisig at spammer.domain) to mydomain.com.br is
> SORBS-DNSBL, SBL+XBL, spamhaus-XBL, spamcop.net
> Feb  6 01:20:04 mailserver MailScanner[3368]: Spam Checks: Found 1
spam
> messages
> Feb  6 01:20:04 mailserver MailScanner[3368]: Spam Actions: message
> 0338C2C0F7.99CBE actions are delete
> Feb  6 01:20:04 mailserver MailScanner[3368]: Spam Checks completed at
> 1579 bytes per second
> Feb  6 01:20:04 mailserver MailScanner[3368]: Virus and Content
> Scanning: Starting
> Feb  6 01:20:09 mailserver MailScanner[3368]: Virus Scanning completed
> at 334 bytes per second
> Feb  6 01:20:09 mailserver MailScanner[3368]: Batch completed at 275
> bytes per second (1655 / 5)
> Feb  6 01:20:09 mailserver MailScanner[3368]: Batch (1 message)
> processed in 6.00 seconds
>
>
> If the virus scanning were to be skipped in this case -- since the
> message was going to be deleted anyway -- the processing time
> should've been 1 second, instead of 6 seconds.
>
> My suggestion is that MailScanner.conf gives us an option to only
> check for viruses in the e-mails which are going to be delivered or
> stored in the quarantine.
>
> Any thoughts?
>
> Best regards,
>
> Pastorino
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************