[Mimedefang] klez detection

[Rich West]

We've been using it in two locations for over a year now, and none of 
our users have complained to date.  If they get a notification about a 
file containing a virus, they notify the sender and have them check it, 
then resend it.

That procedure does add a little overhead, but, since the introduction 
of File::Scan as a basic virus filter, we have been completely immune to 
the virus blooms that have plagued many.

-Rich

> Michael Sims wrote:
>
>> Maybe I shouldn't have dismissed it so quickly, but I've read so many
>> negative things about File::Scan that I never bothered to even try 
>> it.  I've
>> seen warnings about that module on both this list and the amavisd 
>> mailing
>> lists saying that it flags too many false positives to be useful.  
>> Does your
>> experience indicate otherwise?
>>