[EMAIL PROTECTED] wrote: > If done during the SMTP conversation the only thing that is going to > see backscatter is the thing that sent it.
Which is why I qualified my reply with "if the sending relay is a valid SMTP client." > I am under the opinion that a message should never > be silently blackholed. I used to share that opinion, but no longer do for viruses. If you turn off Clam's dubious Phishing options, the odds of a false-positive from Clam are very low. In that situation, there is no point in rejecting; it's better to silently discard. Regards, David. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml