I actually have to disagree with you on this one

I actually have to disagree with you on this one

Posted Aug 21, 2003 16:07 UTC (Thu) by rfunk (subscriber, #4054)
In reply to: I actually have to disagree with you on this one by dlang
Parent article: On the value of virus notifications

the problem is that anti-spam software still has a noticable (i.e. non-zero) false positive rate and as a result if you just have it delete messages with no notification you will delete legitamate mail without anyone knowing about it.

Yes, so the AV software should send a message to the recipient, not the sender. Preferably the recipient should get a sanitized version of the original.

BTW, so far I've managed to mitigate the notification problem with this procmail rule:

 
:0 
* 1^1 ^Subject:\/.*virus found and action taken 
* 1^1 ^Subject:\/ ALERT *- *GroupShield 
* ! ^Subject: Re: 
{ 
        LOG="Dropping virus notice: $MATCH 
" 
        HOST 
} 

---

(Log in to post comments)