Steve,
you are right, in this case the message will be considered as not infected.
The point is that this header is written in order to have more flexibility writing
config.xml, and to avoid scanning more than once. The risk of having the sender of the
virus infected email adding *exactly* such header is (right now) very very low, as it
would mean that the virus is explicitely addressing James and this specific matcher:
we are not yet so famous! :-) Unless someone wants to attack you personally.
But in fact is something to address, and my plans are to change it from being a
matcher that does everything to being a mailet that has 2 special init parms:
a <headerName>my [EMAIL PROTECTED]</headerName> and
a <scanAlways>true/false</scanAlways>.
This way I can avoid any such risk. A HasHeader matcher can later on check the outcome
of the antivirus mailet and do whatever is required.
I need a mailet to avoid having an ugly matcher condition string as is currently used.
Vincenzo
> -----Original Message-----
> From: Steve Brewin [mailto:[EMAIL PROTECTED]
> Sent: venerdi 6 giugno 2003 12.09
> To: 'James Users List'
> Subject: RE: Virus scanning mailet/matcher
>
>
> Vincenzo
>
> Just had a quick look at the docs for your virus scanner. One
> question. What
> happens if the sender of the virus infected email adds an
> "X-MessageIsInfected: false" header to the envelope?
>
> -- Steve
>
> > -----Original Message-----
> > From: Vincenzo Gianferrari Pini
> > [mailto:[EMAIL PROTECTED]
> > Sent: 06 June 2003 10:47
> > To: James Users List; james-subscribe
> > Subject: RE: Virus scanning mailet/matcher
> >
> >
> > See http://www.mailet.org/directory.html
> >
> > The antivirus invoker matcher works, and is catching the new
> > W32/[EMAIL PROTECTED] virus in my production system.
> >
> > If you need any help let me know.
> >
> > Vincenzo
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
