On Wed, 12 May 2004, Bruce Richardson wrote:
>
> There are issues to be aware of with this approach: load and timeouts,
> mostly. You may want to have the virus scanner (e.g. clamav) listening
> on a dedicated host. You might also consider only scanning messages
> under a certain size (maybe 20K) with Exiscan and sending messages over
> that size through a more conventional filter: this avoids the danger of
> timeouts caused by scanning very large messages (and since viruses in
> documents over that size are quite rare, spurious NDRs are still not
> much of a risk).
Most email viruses at the moment are around the 25K mark. Last year they
were usually over 100K.
--
Tony Finch <dot@???>
http://dotat.at/
