On Sun, 31 Dec 2006, Luca Gibelli wrote: > > How exactly is this better then a possibe false-positive, if a corrupted > > sig > > happens to match some valid piece of mail ? > > It's better to delay N emails rather than delete N emails.
A false-positive won't delete the mail - it will cause an immediate error to the recipient so they know there is a problem. A delay in say a default sendmail configuraiton won't give any notice to the sender for 4 hours. I would consider the immediate feedback preferable, and most of my users do too. ========================================================== Chris Candreva -- [EMAIL PROTECTED] -- (914) 948-3162 WestNet Internet Services of Westchester http://www.westnet.com/ _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html