Thanks for the info. I will definitely take that into consideration before making any changes.I'm either missing what you are referring to or it isn't there, or I am wrong on what the current order of execution is. Could you be more specific as to which option you are speaking of?
You can add a line "AVAFTERJM ON" to accomplish this. However, be warned that any E-mail held by Declude JunkMail will not have been scanned for viruses.
"Absolutely Bad" is kind of strong. Maybe I didn't explain my reasons. I would like to be in more control of the filtering just like we are with JunkMail. It's a big jump to just start deleting messages without allowing our users any control. If we had the options to filter/delete/notify/etc... just like in JunkMail then we would set up defaults for everybody and let them change those over time as needed.
Virus scanners are very, very accurate. I can't remember the last time that I saw a false positive with a virus scanner (the few times that I have it always turned out to be when the virus scanner was set up to detect "suspicious" files, and it blocked a .doc/.xls file with a macro).
Also, some e-mails might fail some of the "Outlook" vulnerabilities but not necessarily contain a virus, so how am I to know for sure if it really contains a virus?
That's like saying "A friend of mine pointed a gun at me, how do I know if it was loaded or if he was playing a practical joke?"
If someone is sending out an E-mail that will be blocked by any up-to-date virus scanner, and is almost certainly not RFC-compliant -- and you know that if it contains a virus, it cannot be detected -- why would you want that E-mail?
I agree that virus scanners are very accurate and I don't have an issue when McAfee (or others) detects a virus. It's the Outlook vulnerabilities that I've had a few false positives on, so having more filtering control would allow me to handle those messages differently than ones that contain a virus as detected by a stand-alone virus scanner. The response to this is probably going to be "have the sender's mail server/client fixed"; and that's probably good but I'd still like to have more control too.
Now that I'm aware of the "AVAFTERJM ON" I will probably just use that. The main thing I wanted was to minimize the number of virus notification messages to our users so that our mail admin wouldn't be tasked with going through lots of messages to search for false positives. With this option there will be fewer messages to wade through.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
