Author: Graeme Fowler Date: To: exim-users Subject: Re: [exim] callback on data acl checks?
On Mon, 2011-02-28 at 22:10 +0100, Marco Gaiarin wrote: > Clearly i can add av checks on border server, but i think that removing
> the av check on internal server is not good, and doing two times the
> checks...
Install the *exact same* ClamAV version everywhere with the same data
files/tests.
When an email passes through ClamAV and is clean, add a header to mark
it as "clean"; on the other machines machine, exempt mail from being
scanned if it has that header and then remove the header when delivering
the message to a "final" destination (internal mailbox or external
system). That way your header stays within your system at all times.
Each message only gets checked once, regardless of direction of flow.
That said, passing through ClamAV more than once won't hurt very much.
