On Sun, Mar 21, 2004 at 01:13:51PM -0500, Bit Fuzzy wrote: > I notify the 'recipient' in the event the email in question was expected > (part of a project, family / business correspondence etc).
You need to distinguish between Worms and Viruses. Worms are just propagating themselves. There's never any harm in dropping a worm since they are not part of a project or a correspondance. Viruses on the other hand attach to otherwise legitimate files and of course they should be bounced. > I know if I was hosted, and the host was making decisions for me regarding > how certain mail was handled I'd be looking for a new host. I know if I was hosted and my hoster was propagating worms that forged my name I would be looking for a new host. Clamav distinguishes between Worms and Viruses in the name, but not in the return code as far as I know. For most milters it wouldn't be a problem to grep the output for the "Worm" in the name and drop them in /dev/null. Another way to handle it is to have clamav on all your MX hosts and report 4xx fatal errors to those that try to send you a worm/virus. For worms you know you are talking directly to the SMTP engine of the worm (since all MX hosts are running the software) and so the error code cannot cause a bounce. -- Erik Corry I'd be a Libertarian, if they weren't all a [EMAIL PROTECTED] bunch of tax-dodging professional whiners. - B. Breathed. ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
