Re: [Exim] local_scan(), content-scanning, multiple recipien…

> On Wed, Feb 05, 2003 at 08:28:37PM +0000, Chris Edwards wrote:
> > We've been pondering this too...
>
> Glad I'm not alone! :)
>
> > Our plan is to make spam content filtering opt-*out*. With any luck
> > relatively few folk will opt out and the scenario in question will
be
> > rare...
>
> Unfortunately, our service is going to have to be opt-in, so there is
a much
> greater liklihood of the scenario we describe.
>
> Also, with anti-virus, we can't use your logic. If a customer has
opted out of
> viruses, we HAVE to stop them; we can't let them pass because another
recipient
> of the same message doesn't want his mail scanned. You see our
dilemma...? :)
>
> Thanks.
>
> Ollie

My own suggestion would be to explain to your users, at the time they
are choosing opt-in or opt-out, that this dilemma exists, and that,
should a message come in addressed to more than one user of your system,
and at least one of those recipients wants scanning to be done, then you
WILL scan. And the users simply have to understand that. Usually,
messages people do not want scanned are the ones directed only to
themselves; they may not care so much about messages going to multiple
recipients.

In the case of viruses, I think you have a legitimate claim to blocking
them, regardless of user's wishes. For example, whoever provides your
bandwidth probably has a clause demanding that you not knowingly
transmit viruses.

Just my 2 cents.

Jim Roberts
Punster Productions, Inc.