Hello all,
Yep another newbie question.
We are currently looking at switching to Clamav from Symantec SMTP and there is one feature that I really like from Symantec that I cannot find in Clamav (at least I cannot find). This is the ability to identify mass-mailing viruses based on the name of the virus detected. For example the W32.Beagle (or Bagle) from Symantec shows up as [EMAIL PROTECTED] This means that can then drop any messages with the @mm instead of just removing the attachment and sending on to the client.
Am I totally off on this, or is there some solution to this?
This is not really a function of the av scanner, but rather a function of the program which is used to call the av scanner. clamav just says YES or NO it is a virus or isnt. Just as an example, im using qmail with qmail-scanner and clamav. qmail-scanner has the ability to define a list of mass mailing viruses to as to not send notifications to the sender.
Other programs have this ability also, but the point is that clamav doesnt and (arguably) shouldnt make this distinction.
-Jim _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
