[prev in list] [next in list] [prev in thread] [next in thread] 

List:       amavis-user
Subject:    Re: [AMaViS-user] How to only strip infected attachment instead of discarding whole mail?
From:       Stephane Lentz <stephane.lentz () ansf ! alcatel ! fr>
Date:       2004-06-30 12:41:55
Message-ID: 20040630124155.GP16374 () iww ! netfr ! alcatel ! fr
[Download message RAW]

On Wed, Jun 30, 2004 at 01:38:22PM +0200, Luca Maranzano wrote:
Hi, 
> Hi all!
> 
> Is it possibile to configure amavisd-new in order to strip attachments
> containing viruses from the email, but leaving the other mime sub-parts
> (such as text parts) instead of discarding the whole message?

=> No.  

> We have a customer which has TrendMicro Interscan Virus Wall and this
> product implements the above logic for infected mail messages.
=> Yes, I know this feature. By experience I can tell you It cause more
harm (questions/complaints are frequent) than good.

> I think that this behaviour could help the recipient to understand better 
> if the content of the mail was just junk or something more important.
> 
=> No. After huge worms spreads (remember some MIMAIL/SOBER/NETSKY variants) 
your recipients will complain about receiving such messages. 
This can be viewed as a kind of spam. 
If you want your recipients to be aware of your virus blocking solution
send a digest on a regular basis mentioning viruses that were blocked
or set-up a Web-page. 
The age of infected doc/xls files is over : now all infected messages 
are really to be trashed (without sender and recipient notifications)
and in some cases without even being quarantined (MIMAIL experience).  

Regards, 

SL/

---
Stephane Lentz 
AES TSC


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[prev in list] [next in list] [prev in thread] [next in thread]