Re: [dspam-users] clamav tag?

Brent Stephens wrote:
> Miguel,
>
> From what I have gathered, you either drop or deliver viruses using
> ClamAV + DSPAM. When delivered, its going to mark them as Spam. In
> my opinion there is no point to delivering viruses. In fact, its just
> plain dangerous. If someone is sending your users a virus, there is
> no reason to keep that email around.
This is certainly true as far as it goes, but doesn't it ignore the idea
of false positives from your virus scanner? We've certainly caught false
positive virus identification in the past, so it doesn't seem
unreasonable to have some sort of quarantine procedure for e-mails
tagged as "virus", for later human confirmation. Of course, like all
features, ideally it'd be configurable by the admin to just drop e-mails
detected with viruses, if that's what you prefer.

Graeme
Received on Mon May 1 14:09:03 2006