Karsten Bräckelmann wrote: > On Wed, 2007-10-03 at 18:31 -0500, René Berber wrote: >> Karsten Bräckelmann wrote: > >>> Another downside of this approach, together with ClamAV treating mbox >>> format files as text/plain is, that only the first hit will be reported. >> That was made to improve performance, the Changelog say so. > > Thanks for clarifying this, René. > > Anyway, that whole last paragraph was a heads up to those who advocated > re-scanning after delivery (see the recent threads). They do not get > what they believe they do.
Unless you separate the mbox file(s) into maildir files and then you get exactly what you expect. It is, however, an annoying additional step one must take to ensure systems are as secure as possible. dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
