On Fri, Aug 08, 2008 at 03:20:01PM CEST, [EMAIL PROTECTED] said: > David F. Skoll wrote: > > G.W. Haywood wrote: > > > >>> Currently, we accept all infected mail, and quietly quarantine it. > > > >> May I suggest that you quarantine it, BUT STILL REJECT IT after it > >> has been read (and recorded) in its entirety? > > > > No, please don't do that for viruses. If they are being transmitted > > by a real SMTP client, you'll generate annoying backscatter. > > > > If done during the SMTP conversation the only thing that is going to > see backscatter is the thing that sent it. Which really isn't > backscatter. I am under the opinion that a message should never > be silently blackholed.
This mean your MTA must call clamav after the DATA end, but before answering it. -- Erwan _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
