On Wed, 13 Oct 2004, Greg T. wrote: > I guess I don't understand the question. I hate to > sound dense, but could you restate? Also, be aware > that I'm no mail genius. > --- [EMAIL PROTECTED] wrote: > > > > Somewhere between Exim and Cyrus, selected emails > > are disappearing. I don't know what the criterion > > is for the emails coming up missing, so I thought > > I'd start with ClamAV. > > > > > > When Clam decides an email contains a virus, what > > does it (Clam) do with the email. Does it put the > > email somewhere? > > > > > > > Clam doesn't touch the email itself, it simply tells > > the calling program > > that it either is or isn't a virus. What does exim > > use to send the > > message off to be filtered?
Exim is an MTA (mail transfer agent). It's job is to take mail in via smtp or a local socket and deliver it to the LDA (local delivery agent like procmail or vdeliver) so that a user can use an MUA (mail user agent like pine, outlook, etc) to read the mail. The scanner gets placed between the MTA and LDA. What is the "glue" which does the scanning/filtering from Exim? MTA<-->Scanner/filter<-->LDA. I don't use exim and this scanning mechanisim may be built in. Generally people use software like amavis as the "glue" between the MTA and LDA for scanning/filtering viruses. Either way, Clam doesn't do the mail filtering itself, it just says yes it is a virus or no it isn't. Does this help answer your question? -- Eric Wheeler Vice President National Security Concepts, Inc. PO Box 3567 Tualatin, OR 97062 http://www.nsci.us/ Voice: (503) 293-7656 Fax: (503) 885-0770 _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
