On Thursday 03 Feb 2005 22:24, Olaf wrote: > Rob MacGregor schrieb: > > Well, first off, given that most email borne viruses forge the sender > > address, sending a "we blocked a virus from you" email is antisocial. > > This is true, no question about it. But I am also interested in a "how > to write email notifiation scripts". At my site, I would like to inform > the recipient that a virus had been blocked, including sender address, > date, time and the name of the virus.
We stopped notifying customers some time ago, they get confused, hassle you because they think that you have infected their machine, and once you explain to them, sometimes repeatedly that it was information only they get bored and complain some more. We now do a monthly report, pulled from the logs for those who ask for it, mostly IT admins. IMHO of course The likelyhood of the dirty email coming from someone they know is virtually nil, unlike 3-4 years ago when most infected mail came from a known user. No more. This is organized crime creating a web of zombies, and they are getting smarter, bulk emailing in small batches to different servers so as not to disturb firewall triggers or tarpits, using dictionaries, and not always american ones either. RBL percentages are dropping, even though known zombies are now being listed, it's a constant battle. My two bits worth -- ----------------- Bob Hutchinson Midwales dot com ----------------- _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
