If we are running clamav using individual user .procmailrc files, is it 
advisable to only invoke the scan if the email contains an attachment / 
multipart to save on the overhead of scanning all email?

Currently, we use this simple procmail entry:
:0
* multipart
{
VIRUS=`/usr/local/bin/clamdscan --mbox --disable-summary --stdout  -`

:0 Di
* VIRUS ?? FOUND
mail/mail.virus
}

which only runs the scan if the keyword "multipart" is found. Thanks for 
any feedback. This is a great product, and very flexible for different 
configurations!

Rob



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to