Steffen Heil wrote:
> Hi
> 
>> We have Clam Av installed and running.  It is blocking virus e-mails
but
>> is not generating any notification.
> 
> ... PLEASE only send a notification to the
> intended user, NOT to the author. This would cause lot of
> collateral damage.

With one caveat.
It is perfectly acceptable to place an explanatory message in an SMTP
REJECT message.

Something like

EHLO (hi)
MAIL FROM (ok)
RCPT TO (ok)
DATA (can't accept for delivery, contains the EICAR virus!)

If the mail is being sent by a virus, the virus will usually just give
up and go on to the next recipient server on their list.  No "you sent a
virus" mail is sent to a (usually) innocent third party.

If the virus is a false positive, and is really good mail being sent by
a legitimate mail server, the sending mail server will keep the
responsibility of generating the undeliverable message.

It would be nice if the SMTP reject message was customizable - say, to
include a phone number to call in case of false positives.  I didn't see
anything in the man pages for 0.75.1 - did I miss it?

[EMAIL PROTECTED]                      805.964.4554 x902
Hispanic Business Inc./HireDiversity.com         Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to