Manage quarantine

[Joan Bryan]

Hello

We delete quarantine files over 30 days old with a cron job.

We have decided against automated retrieval of quarantine files, because
users often request to be sent actual infected files.  When a new virus
comes out the number of requests for infected files increases.  For example,
when Bugbear came out the virus-info account received 10 or so requests per
day for a couple of weeks. The only case for automatic retrieval (in our
case) would be restricted to IFRame and object codebase files. The requests
for these amount to roughly 2 or 3 per week. (This is from a total of
240,000 average daily scanned messages and average 600 viruses per day)

Joan

Joan Bryan
Information Systems
King's College London
020 7848 2671
mailto:joan.bryan at kcl.ac.uk