Well I'm not sure of what you guys do (haven't been watching this thread too closely), but I just hacked up the is_replyable_email() function to return 1 on certain viruses like Illegal MIME Headers (which just turn out to be spam from address that don't work any way), and certain viruses like Klez.
Maybe this could be a feature to think about? ----- Original Message ----- From: "Jason Haar" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, May 02, 2002 4:11 PM Subject: Re: [Qmail-scanner-general]Klez > On Thu, May 02, 2002 at 11:22:59AM -0700, Surly Zek wrote: > > adding the source > > ip for people to use when troubleshooting has been > > saving many people many headaches. > > How? > > I'm glad you have found your own solution, however it really only deals with > Klez. There is no one "right" way of dealing with this. At the end of the > day, the virus writer can do absolutely anything they want with the Email > they generate - any scanning system (like Q-S) can only act on what it is > presented with. > > -- > Cheers > > Jason Haar > > Information Security Manager > Trimble Navigation Ltd. > Phone: +64 3 9635 377 Fax: +64 3 9635 417 > > _______________________________________________________________ > > Have big pipes? SourceForge.net is looking for download mirrors. We supply > the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
