Autor: Ian Eiloart Datum: To: matt, worm, exim-users CC: Betreff: RE: [exim] Exim+ClamAV header
--On 26 October 2005 11:31:18 -0500 Matt Sealey <matt@???> wrote:
>
>> You probably shouldn't say this:
>> > X-Virus-Status: Clean
>>
>> Presumably, if it isn't clean you'll reject the email, which
>> makes this redundant. More importantly, it won't always be
>> true. No anti-virus software detects all viruses. ClamAV
>> isn't even the best.
>>
>> When will it mislead?
>
> I suspect it's informational for people checking the headers as to why
> things get rejected or passed, and what checking has been done before;
> it's possible that you would like to know if it has been passed as clean
> or as a virus, but don't reject the mails in case it's a false positive
> (maybe you are intentionally mailing each other viruses! Imagine how a
> virus checker author works :)
Then, at best, it should say "not found" instead of "clean". If we had
software that *reliably* found all viruses, then the virus would be out of
business.
