Thanks Tim!
This is quite helpful. I appreciate the input on the whole notifying the
users thing. Makes sense!
Eric
----- Original Message -----
From: "Tim Jackson"
To: <exim-users@???>
Sent: Tuesday, November 23, 2004 6:17 AM
Subject: Re: [exim] exiscan configuring?
> On 23 Nov 2004, Eric Eric wrote:
>
>> Can anyone tell me how to configure the exiscan addon?
>
> Read the Exiscan documentation at http://duncanthrax.net/exiscan-acl/
> and/or check my HOWTO at http://www.timj.co.uk/linux/exim.php - PDF or a
> slightly dodgy HTML version available.
>
>> I looked around but couldn't find much on it - or I looked in the wrong
>> places. I'd like the server to NOT email senders of viruses telling them
>> that their message was rejected. But I would like a message sent to the
>> recipient stating why the message was rejected. So they can contact the
>> sender if needed.
>
> I'd strongly advise against this. In almost all cases, the virus will not
> be a "real mail" with some infected attachment, but just an outright
> virus-generated mail, with a forged sender. So :
>
> a) it won't be useful to the recipient
>
> b) it will fill up their inbox and waste their time
>
> c) there is a strong likelihood that your recipients will email the
> (forged) sender saying moronic things like "why did you send me a virus?"
> and/or "please disinfect your mail and resend", which has the same effect
> as collateral spam except it's even harder for the innocent joe-jobbed
> victim to block.
>
> If you need to "prove" you're doing something useful, just generate some
> aggregate statistics. (e.g. "we rejected X viruses this week for recipient
> Y")
>
>
> Tim
>
>
>
