On Wed, 28 Jan 2004, Nigel Horne wrote:
> If systems administrators can't even be trusted to set up systems correctly
> to not bounce on trapping a worm how can they be trusted to update to an AV
> system that supports some new flag?

Well, from our point of view, I think it could be a useful tool if the
ClamAV database included this info, at the cost of an extra byte per
entry.

WE'LL be responsible sys admins...and if others aren't...well, they're
already not responsible, because they aren't using the most responsive
virus scanner available, right?  (By the way, congratulations on providing
MyDoom protection for at least half a day before any commercial products
detected it.)

Although, now that I think about it, I guess getting that info from the
ClamAV database to the tool that would actually generate the bounce
message is probably non-trivial.  If any of the authors of those packages
show an interest in the entry, though, it makes sense to me that ClamAV
provide that information.

At worst, we can by default set all the Booleans for a positive bounce,
then just add the 16 or so most popular negatives and change the rest as
they're added or as spare time (har har) allows.

Jeffrey Moskot
System Administrator
[EMAIL PROTECTED]


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to