Quick question about 'All-Viruses' tag

[Antony Stone]

On Monday 29 September 2003 2:29 pm, Mike Brudenell wrote:

> Greetings -
>
> A very quick'n'easy question about the 'All-Viruses' tag to the 'Silent
> Viruses' directive; for example:
>
>     Silent Viruses = HTML-IFrame All-Viruses
>
> Does this identify *all* viruses as being silent, as in:
>  1. Don't notify the sender, and
>  2. Don't deliver (assuming 'Still Deliver Silent Viruses = no')

Yes.   It's as though you listed every single virus name (however many
thousand your antivirus product claims to detect) for the Silent Viruses
option.

> Basically I think I'm after this sort of setup:
>  1. Never notify the sender when a virus-infected message is found;

Silent Viruses = All-viruses will do that for you.

>  2. Where possible clean and deliver the attachment, otherwise silently
>     bin it.

I think you'll have a problem with this bit, because MailScanner can either:

 - remove the virus and replace it with a message telling the recipient that
a virus was found and removed, and deliver that

or

 - not deliver any emails which contain/ed viruses.

Note that the first option will always send a message to the recipient
telling them a virus was addressed to them, even if the virus occupied the
entire message and there no longer anything left worth delivering.

In other cases, where just one attachment is infected and the rest of the
message (and perhaps other attachments) are okay, the remainder will be
delivered as normal, with the offending attachment replaced by the
explanation of what was found and removed.

Regards,

Anton.


--

What I don't know far exceeds what I know, but unfortunately, it is far
easier to write about what I know than about what I don't know.

 - Kevin Kelly, Out of Control