On Friday 06 February 2004 15:20, Nigel Horne wrote:

> > What do you think about add full header of infected
> > message to message for postmaster ? 
> 
> No need, just put infected messages into quarantine and
> look at them there. Quarantine of incoming messages will
> be supported in 0.66 and is available for testing now from
> CVS.
It's bad way in some situations. On medium on big relay 
quarantine is not good. Infected message must be dropped
(or are you think what ISP will be analyze thousands 
infected messages ? :-) ).

The message to postmaster my be processed automatically
and cause disable user in ISP billing system.

> > And, additionally, very nice will be put virus name in
> > regect message "550 5.7.1 Virus detected by Clam
> > AV - http://clamav.elektrapro.com";
> 
> 550 is an SMTP status message not really expected to be read
> by a human reader and anyway many people are turning this off
> since FROM addresses are so often faked.

Are you sure ? I can show screen shot ot user's mail client 
with it message :-)

-- 
Regards,
Sergey



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to