On Mon, 2004-04-12 at 00:51, Chris Kloiber wrote: > On Mon, 2004-04-12 at 09:05, Alexander Dalloz wrote: > > define(`confINPUT_MAIL_FILTERS', `clamav')dnl > > > > That is no needed sendmail.mc entry. InputMailFilters is set up > > automatically in sendmail.cf, even if you use multiple milter > > applications. If used though "define" entries have to be placed at top > > of sendmail.mc, in front of FEATURE and INPUT_MAIL_FILTER entries. Last > > in front of the MAILER settings. > > Is this somehow better than using procmail to call clamav-milter? What follows can be seen as purely a WildAssedGuess. I haven't been able to test or verify this. If I am wrong, then please simply ignore this post and I'll go sit in the corner with my dunce cap. There are others who can answer much more authoritatively than I. I've observed that by calling clamav-milter (or anything for that matter) via procmail, the entire message is accepted, with or without a virus, spooled to disk, etc., all the normal things, before the scan takes place. Here's the guessing part... Calling clamav-milter from sendmail.cf _appears_ to pick the virus signature out of the incoming data stream and close the connection when one is found, thereby eliminating the extra disk work. That may or may not be what's happening. It's simply my observation. Some could argue that it's a small distinction but on a heavily loaded, high volume server, it may make a difference.
