Vincenzo

Sounds like you are way ahead of me!

-- Steve

> -----Original Message-----
> From: Vincenzo Gianferrari Pini
> [mailto:[EMAIL PROTECTED]
> Sent: 06 June 2003 12:00
> To: James Users List; [EMAIL PROTECTED]
> Subject: RE: Virus scanning mailet/matcher
> 
> 
> Steve,
> 
> you are right, in this case the message will be considered as 
> not infected.
> 
> The point is that this header is written in order to have 
> more flexibility writing config.xml, and to avoid scanning 
> more than once. The risk of having the sender of the virus 
> infected email adding *exactly* such header is (right now) 
> very very low, as it would mean that the virus is explicitely 
> addressing James and this specific matcher: we are not yet so 
> famous! :-) Unless someone wants to attack you personally.
> 
> But in fact is something to address, and my plans are to 
> change it from being a matcher that does everything to being 
> a mailet that has 2 special init parms:
>       a <headerName>my [EMAIL PROTECTED]</headerName> and
>       a <scanAlways>true/false</scanAlways>.
> This way I can avoid any such risk. A HasHeader matcher can 
> later on check the outcome of the antivirus mailet and do 
> whatever is required.
> I need a mailet to avoid having an ugly matcher condition 
> string as is currently used.
> 
> Vincenzo
> 
> > -----Original Message-----
> > From: Steve Brewin [mailto:[EMAIL PROTECTED]
> > Sent: venerdi 6 giugno 2003 12.09
> > To: 'James Users List'
> > Subject: RE: Virus scanning mailet/matcher
> > 
> > 
> > Vincenzo
> > 
> > Just had a quick look at the docs for your virus scanner. One 
> > question. What
> > happens if the sender of the virus infected email adds an
> > "X-MessageIsInfected: false" header to the envelope?
> > 
> > -- Steve
> > 
> > > -----Original Message-----
> > > From: Vincenzo Gianferrari Pini
> > > [mailto:[EMAIL PROTECTED]
> > > Sent: 06 June 2003 10:47
> > > To: James Users List; james-subscribe
> > > Subject: RE: Virus scanning mailet/matcher
> > >
> > >
> > > See http://www.mailet.org/directory.html
> > >
> > > The antivirus invoker matcher works, and is catching the new
> > > W32/[EMAIL PROTECTED] virus in my production system.
> > >
> > > If you need any help let me know.
> > >
> > > Vincenzo
> > >
> > 
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to