[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

David F. Skoll dfs at roaringpenguin.com
Wed Jun 29 17:06:21 EDT 2005


Les Mikesell wrote:

> If the thing sending is a standards-conforming MTA, your refusal
> obligates it to construct a bounce back to what it thinks is the
> sender.  In the case of viruses, this will always be incorrect so
> you are likely swamping some innocent party's mailbox with bounces.

I agonized over this decision for quite a while, but finally came
down on the "Discard Silently" side.  FP's from anti-virus scanners
are extremely rare, possibly unheard of, so on balance, I think
discarding is better than rejecting for viruses.

Regards,

David.



More information about the MIMEDefang mailing list