[SA-exim] SA-Exim and Exiscan4 in Local Scan

Jeff Clark jclark at crownofmaine.net
Fri, 19 Jul 2002 11:26:18 -0400


Nick/Mark,

Thanks for the replies.  I've installed the newest exiscan which, as you
suggest, does work side-by-side with Sa-exim out of the box!  I'm still
testing it, but it looks like a very good solution.  One more thing though.
In my testing it seems that Exiscan is run on messages first, followed by
Sa-Exim.  Since the amount of spam my server receives is staggering, I'd
prefer to have sa-exim run first.  This way junk can be removed before
resources are wasted scanning it for viruses.  Is there a way to change
this?

Thanks again!

Jeff

> -----Original Message-----
> From: Nick Bellomy [mailto:nick@emphasys.net]
> Sent: Thursday, July 18, 2002 2:06 PM
> To: Marc MERLIN
> Cc: Jeff Clark; SA-Exim@lists.merlins.org
> Subject: Re: [SA-exim] SA-Exim and Exiscan4 in Local Scan
>
>
> Tom just released a new version of exiscan that could possible aid in
> this attempt:
>
> From the (new) CHANGELOG:
> --------------------------------------------------------
> rev 10:   - Moved exiscan out of local_scan(). exiscan
>             now has its own exiscan.c and exiscan.h
>             files. That means you can now easily use
>             another local_scan() patch.
>
>           - Added spam scoring abilities with
>             SpamAssassin's "spamd" daemon. See the
>             new config options for details.
>
>           - Improved kavdaemon virus report. It should
>             get it "right" now. Thanks to Dariusz
>             Sznajder <darek@beast.tu.kielce.pl> for
>             pointing out a stupid mistake :)
>
>           - Added more logging output. (sender, subject,
>             host, etc.)
>
>           - Added conditions for scanning. You can now
>             exclude messages from scanning based on
>             exim's expansion variables (or file lookups).
>
> ---------------------------------------------------------
>
> --Nick
>
> On Thu, 2002-07-18 at 10:00, Marc MERLIN wrote:
> > On Thu, Jul 18, 2002 at 10:50:07AM -0400, Jeff Clark wrote:
> > > Greetings Everyone!
> > >
> > > I would like to start by thanking the authors of SA, SA-Exim
> and Exiscan.
> > > Great work!
> > >
> > > We are currently running Exiscan 4 with SA successfully.
> However, we'd like
> > > to integrate SA into exim at the smtp level via sa-exim.
> I've seen one
> > > reference on how to have both Exiscan and SA-Exim in
> local_scan on the Exim
> > > mailing list but was wondering if there is any official way
> of doing this?
> >
> > There isn't really an official way of doing it. Someone did do what I
> > suggested, namely to run one, and if it was to return accepts,
> it calls the
> > other one and returns that return code.
> >
> > Marc
> > --
> > "A mouse is a device used to point at the xterm you want to
> type in" - A.S.R.
> > Microsoft is to operating systems & security ....
> >                                       .... what McDonalds is to
> gourmet cooking
> > Home page: http://marc.merlins.org/   |   Finger
> marc_f@merlins.org for PGP key
> >
> > _______________________________________________
> > SA-Exim mailing list
> > SA-Exim@lists.merlins.org
> > http://lists.merlins.org/lists/listinfo/sa-exim
>
>
>
>