Granted... I'm thinking of it this way. One option is already in the file... Sysop adds the second option by mistake and thinks everything is fine.
If that causes everything to go through... 3 days later they discover that many thousands of infected emails have made it through and infected a number of client systems. Most embarrasing: A. hundreds of infected user systems? B. 1000 or so unfortunately bounced messages? I pick A as the least desirable scenario. It's a personal choice, granted, but in our systems engineering class we call this built-in error sensitivity... a lot like a one-legged stool - somebody falls asleep they fall down quickly and know it. _M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff | Sent: Wednesday, December 04, 2002 1:41 PM | To: [EMAIL PROTECTED] | Subject: RE: [Declude.Virus] Ban/Allow extensions | | | >I think in case of a collision [3] it would be safer to ban all | >extensions | and generate an error in logs. In case the log isn't reviewed | quickly enough | a: the sysop would likely be prompted by a user, b: nothing | ugly would suddenly get through in case of a configuration mishap. | | I am not so sure about that, as for collision to occur, the | sysop would have to manually add both options in the virus.cfg file. | | If a mistake was made and both options were there, and you | are dealing in say 1000 messages per hour, by the time a user | noticed something and complained and you responded, it could | be quite embarrassing over a simple mistake. | | John Tolmachoff MCSE, CSSA | IT Manager, Network Engineer | RelianceSoft, Inc. | Fullerton, CA 92835 | www.reliancesoft.com | | | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
