On 07/29/2011 02:13 PM, Kelson Vibber wrote:
> Also, to complete the system, I recall there were some AV-mailets at the age.
If possible use> them before SA to catch message carrying viruses.
Absolutely - we've got ClamAV running first, before anything touches SA, and
using some of the SaneSecurity signature sets to catch additional malware.
I've often mused about which should run first, but never did any sort of
testing. Is it pretty much the general consensus that it's less
wasteful for the AV to scan the spam than to have SA scan the malware?
