Hi there,
On Wed, 24 Feb 2021, Andrew C Aitchison via clamav-users wrote:
On Tue, 23 Feb 2021, Joe Acquisto-j4 wrote:
Wondering now what people generally do with infected mail? That is, is
there a general consensus?
Would it be "safe" (for the systems) to simply send the mail through, to the end
use and merely tag the subject line with "Virus Detected" as SPAM messages
are done? Send them to a quarantine mailbox for human review? Notify an
administrator there is email being "held"?
No.
Agreed.
... Postfix ... should be able to *reject* the message ...
This leaves the problem with the sending system.
Agreed, this is the safest approach.
But I urge those of you who are capable and comfortable with it to
TEMPFAIL instead of REJECT, then report the spam to Spamcop etc. if
you can. Not only does this tie up more resources for the offender,
but when likes of Microsoft then try to send it again, from a thousand
and twenty-two other IP addresses, you can report them all as well.
Hotmail accounts are the single worst offender by far at the moment,
so all Hotmail messages are rejected here even if they aren't spam,
but all the spam is reported to at least four spam clearing houses.
--
73,
Ged.
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
