On Thu, 2004-02-26 at 08:28, [EMAIL PROTECTED] wrote:
> so does anyone have a list of which of the current crop of worms should be 
> added to the silent viruses array? i already have Worm.SCO, but i've 
> noticed several of what appear to be variants, and assume they should 
> probably be silenced as well.

Q-S 1.21 will default to only notifying admin instead of "admin,sender"
due to 99.9% of viruses being "forged". If you don't like that, you can
set it back of course - it's just that people are now getting so sick of
the "spam" generated by AV mail servers that I don't want Q-S to be one
of them anymore :-(


Until such a time that the AV vendors define "meta data" within their
virus definitions - so that the likes of Q-S can automatically "figure
out" which viruses forge addresses and which don't, the  silent viruses
array is going to remain the best bet - even though it will always be
out of date.

 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1




-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to