Since ClamAV already has a naming scheme in place (Worm, Phishing, etc), why not just add a config file option to disable each classification (with all of them enabled by default)?
Voila! Admins who want to block everything can do so. Admin who only want to block worms can do so. Admins who don't want to block anything, can do so. Make ClamAV the best <everything> scanner out there, but give the users the ability to turn it into the best <everything-1> scanner. :) -- Freddie Cash, CCNT CCLP Helpdesk / Network Support Tech. School District 73 (250) 377-HELP [377-4357] [EMAIL PROTECTED] _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
