Michael Grant wrote: > Between Mailscanner and Amavisd-new, it seems we need one or the other > of these programs to recursively dig into and possibly uncompress a > message with attachments to be able to virus scan it completely.
Actually MailScanner does NOT recursively dig into compressed attachments and decompress them for the virus scanner. It doesn't need to. Every virus scanner on the market will do that on it's own. MailScanner recursively digs into .zips and such for the purpose of performing filename checks, but it passes them whole to the virus scanner. It might even pass the *message* whole to the scanners.. I know most tools like clamav can deal with being fed a raw mime-822 message and parse out all the attachments, decompress them, scan them, without any external help.