[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

[Jim McCullars]

On Thu, 30 Jun 2005, Les Mikesell wrote:

> No, this is the other side of the same SMTP conversation.  I'm asking
> you to consider what a rejection sets in motion.

   Because I am scanning at the MX for my domain, and because the vast
majority of these viruses come from a hijacked PC with its own SMTP engine
that don't do returns, I think that most of them end there.

> There really is no question about what you have to do with a negative
> DSN from the next MTA.  Likewise they have no choice about what to
> do when you issue one.

   Again, you are assuming that these virus programs perform to standards.
I think this is an erroneous assumption.

Jim McCullars
University of Alabama in Huntsville