Can I inform recipients about a quarantined virus?

[John Wilcock]

Kai Schaetzl a écrit :
> Ugo Bellavance wrote on Tue, 02 Dec 2008 08:09:35 -0500:
> 
>> You can do it but it is a very bad idea, as a lot of viruses are sent 
>> with forged address.
> 
> It might be a bad idea, but I can't see why it should be a bad idea for 
> this reason. It's obvious that you don't want to alert faked *senders*, 
> but he asked about recipients. In my eyes it doesn't make sense to inform 
> recipients of a *detected* virus either, but it may make sense to notify 
> *recipients* of "other bad content" (only if it didn't get detected as a 
> virus at the same time) as it may actually be something they wanted to 
> receive. Actually, I wouldn't be sure how to handle that if I wanted to.

In some organisations it might make sense to notify *in-house* senders 
of viruses, which can be done with a ruleset on Notify Senders and/or on 
Notify Senders of Viruses.

Likewise, Julian has provided options for notifying of various types of 
bad content separately from viruses:

Notify Senders = %rules-dir%/notify.senders.rules
Notify Senders Of Viruses = no
Notify Senders Of Blocked Filenames Or Filetypes = yes
Notify Senders Of Blocked Size Attachments = no
Notify Senders Of Other Blocked Content = yes
Never Notify Senders Of Precedence = list bulk


John.

-- 
-- Over 3000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr