amavis architecture: What's scanned first?

When amavisd hands over a message to an anti-spam filter or
a virus filter,
which does it give the message first? Virus or Spam?

Thanks,

prick

-- 
The Book of Postfix
<http://www.postfix-bo
ok.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/s
aslfinger/>

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

* Patrick Ben Koetter <pstate-of-mind.de>:
> When amavisd hands over a message to an anti-spam
filter or a virus filter,
> which does it give the message first? Virus or Spam?

virus

-- 
Ralf Hildebrandt (i.A. des IT-Zentrums)        
Ralf.Hildebrandtcharite.de
Charite - Universitätsmedizin Berlin            Tel.  +49
(0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49
(0)30-450 570-962
IT-Zentrum Standort CBF                    send no mail to
plonkcharite.de

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Patrick,

> When amavisd hands over a message to an anti-spam
filter or a virus filter,
> which does it give the message first? Virus or Spam?

See
  http://www.ijs.si/software/amavisd/amavisd-new-do
cs.html#checks

As it is currently implemented, virus checking is performed
before spam 
checks, but this should not be relied upon. All that amavisd
promises
is that it will give precedence to virus verdict before
spam,
regardless of how it obtained its results.

Actualy the precedence goes:
  CC_VIRUS
  CC_BANNED
  CC_UNCHECKED
  CC_SPAM
  CC_SPAMMY
  CC_BADH
  CC_OVERSIZED
  CC_MTA
  CC_CLEAN

Nowadays when virus checkers grew some anti-spam
capabilities (like 
antiphishing rules in ClamAV), and when SpamAssassin has
some (limited)
antivirus capabilities, the distinction between both types
of checks
is getting fuzzier.

  Mark

------------------------------------------------------------
-------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and
a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/