Since the From: and To: addresses are considered un-trustworthy, is it reasonable to have a 'local addresses only' notification option? For example, notify the recipient based on the actual delivery mailbox, and/or notify the sender if the virus is delivered from an internal IP address with a local From:/Return-path/etc. Local addresses/domains could be listed in a db/file, automatically detected, or a combination of both.
The only thing that we really know for sure is the local address to where the email is being delivered. Is this what the notify 'recips' option does, or does it pass the To:/cc: headers? -- Jeremy _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general