(you can simply bounce back a message with .scr, .pif, .exe etc. attachments, especially in case of an email list)
----- Original Message ----- From: "Vincenzo Gianferrari Pini" <[EMAIL PROTECTED]> To: "James Users List" <[EMAIL PROTECTED]>; "james-subscribe" <[EMAIL PROTECTED]> Sent: Friday, June 06, 2003 3:00 PM Subject: RE: Re[2]: Virus scanning mailet/matcher Ok, but the reason for all this, as said in my message, is to avoid scanning more than once. Look at this example (in my own system): 1) A message is received. 2) The IsInfected matcher looks for the header, doen't find it, then scans, finds no virus, writes the header saying that it is not infected, and passes over. 3) Later on a RecipientIs matches and an AvalonListserv forwards the message to 200 users, all in this same domain. 4) For every one of those 200 messages: 4.1) A message is received. 4.2) The IsInfected matcher looks for the header, finds it and passes over. If in step 4.2 the matcher doesn't look for the header, there would be 200 unnecessary scans all at once. Vincenzo > -----Original Message----- > From: james-subscribe [mailto:[EMAIL PROTECTED] > Sent: venerdi 6 giugno 2003 14.37 > To: James Users List; [EMAIL PROTECTED] > Subject: Re[2]: Virus scanning mailet/matcher > > > Hello Steve, > > I think as far as recipient MTA gets this message it can > overwrite envelop header > after corresponded virus scan. > > Friday, June 6, 2003, 1:09:14 PM, you wrote: > > SB> Vincenzo > > SB> Just had a quick look at the docs for your virus scanner. One > question. What > SB> happens if the sender of the virus infected email adds an > SB> "X-MessageIsInfected: false" header to the envelope? > > SB> -- Steve > > >> -----Original Message----- > >> From: Vincenzo Gianferrari Pini > >> [mailto:[EMAIL PROTECTED] > >> Sent: 06 June 2003 10:47 > >> To: James Users List; james-subscribe > >> Subject: RE: Virus scanning mailet/matcher > >> > >> > >> See http://www.mailet.org/directory.html > >> > >> The antivirus invoker matcher works, and is catching the new > >> W32/[EMAIL PROTECTED] virus in my production system. > >> > >> If you need any help let me know. > >> > >> Vincenzo > >> > > > SB> --------------------------------------------------------------------- > SB> To unsubscribe, e-mail: [EMAIL PROTECTED] > SB> For additional commands, e-mail: [EMAIL PROTECTED] > > > > -- > Best regards, > james-subscribe mailto:[EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
