In the recent slashdot post about av software spamming with replies (http://ask.slashdot.org/article.pl?sid=04/01/27/2145223), there was an idea about av databases containing a boolean flag that would say 'this worm fakes from:, dont bother with bounces' or 'this worm has a valid from, send bounces'.
This would greatly reduce the work for mail administrators, with only minimal changes to av engines and wrappers around them (like amavisd-new & co). What are clamav team and other users opinions about this? -- Jure PeÄar ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users