On Friday 03 December 2004 09:44 am, Kiril Todorov wrote: > Ian Lewis wrote: > > That is very interesting information Samuel. I shall be interested to > > compare it to my own data. > > > > We quarantine our emails just in case there are any which are genuine but > > holding viruses. Not very likely but you never know. > > > > Do I understand from what you say that having identified 4 million > > viruses you reject them and they go 'back' to the often spoofed sender, > > still capable of causing trouble? > > I belive he meant rejected at SMTP level with a permanent error code > (5.x.x)
in which case, the only way they would go to an innocent third party is if
they were relayed through another smtp server, and that's Somebody Else's
Problem, because if that other smtp server had rejected the virus in the
first place, you wouldn't have had to reject the message yourself.
Any legit emails that get rejected because of infections (false positive or
not) should go back to the original sender without any problems.
-Jeremy
--
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED]
pgpIGtSXEYprG.pgp
Description: PGP signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
