ClamAV missing Sobig

[Kevin Spicer]

On Mon, 2003-09-01 at 20:12, Antony Stone wrote:

>It would be cheap (it would only be a single machine, with a single
>mailbox,
>so the lowest level of licence as far as the A-V vendors are
>concerned), and
>the only bit I haven't worked out yet technically is how to stop it
>being
>used a bit like an open relay, as it could be abused by somebody
>sending
>loads of Sobigs into it, with lots of innocent email addresses getting
>the
>resultant notifications (I couldn't use the 'Silent Viruses' list,
>because
>that would defeat its entire purpose if someone genuinely sent it a
>Sobig
>sample).

Maybe the answer is not to send notifications, but instead provide a web
page where people can sign in (using their email address) and see the
result of every email they sent (perhaps listed by subject).  My only
concern is that the AV vendors may feel that you're in fact providing a
service to everyone rather than the 'mailbox' you're protecting.







BMRB International
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the
recipient and may contain confidential and/or privileged
material.  If you have received this in error, please contact the
sender and delete this message immediately.  Disclosure, copying
or other action taken in respect of this email or in
reliance on it is prohibited.  BMRB International Limited
accepts no liability in relation to any personal emails, or
content of any email which does not directly relate to our
business.