Can I inform recipients about a quarantined virus?
john at tradoc.fr
Tue Dec 2 15:11:43 GMT 2008
Kai Schaetzl a écrit :
> Ugo Bellavance wrote on Tue, 02 Dec 2008 08:09:35 -0500:
>> You can do it but it is a very bad idea, as a lot of viruses are sent
>> with forged address.
> It might be a bad idea, but I can't see why it should be a bad idea for
> this reason. It's obvious that you don't want to alert faked *senders*,
> but he asked about recipients. In my eyes it doesn't make sense to inform
> recipients of a *detected* virus either, but it may make sense to notify
> *recipients* of "other bad content" (only if it didn't get detected as a
> virus at the same time) as it may actually be something they wanted to
> receive. Actually, I wouldn't be sure how to handle that if I wanted to.
In some organisations it might make sense to notify *in-house* senders
of viruses, which can be done with a ruleset on Notify Senders and/or on
Notify Senders of Viruses.
Likewise, Julian has provided options for notifying of various types of
bad content separately from viruses:
Notify Senders = %rules-dir%/notify.senders.rules
Notify Senders Of Viruses = no
Notify Senders Of Blocked Filenames Or Filetypes = yes
Notify Senders Of Blocked Size Attachments = no
Notify Senders Of Other Blocked Content = yes
Never Notify Senders Of Precedence = list bulk
-- Over 3000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages - www.tradoc.fr
More information about the MailScanner