John Jolet [EMAIL PROTECTED] wrote:
> On the issue of manually reviewing the mails to submit....isn't this the
> purpose of the quarantine directory?  When it detects a phishing
> malware, look at the file in the quarantine directory.

I also don't believe in quarantine directories, which have to be checked
by admins or users anyway after all.  If I accepted messages and then
filtered them into a quarantine directory, false positives would get lost
without the sender being notified.  Instead I outright reject unwanted
messages during the SMTP transaction, so the sender gets notified.  My
users can see what messages have been rejected by skimming over a list of
recently rejected messages once or twice a week (see an example here[1]).
This practice has proven to work well for me and my users. :-)

References:
 1. http://julian.io.link-m.de/misc/rejected-messages

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to