Have your filter modify the infected email to remove any attachment data (or the entire mail body, if you choose) and replace it with a message to the recipient that the mail was found to be infected and the data has been removed. There's a return code for a filter to indicate a modified message, which would be what you're after here.
At 19:53 3/10/2004, Jason Badry wrote: >I was thinking about this further, and how would I go about having XMail >notify the recipient that an email did come through, but it had a virus so >was deleted. Perhaps just send the headers on and no body/attachments. I >just don't want to have mail disappearing if the AV starts acting >up. Similar to my Spam filter, set the subject to something filterable by >the client. > >Has anyone done this? > >... Jason > >At 06:12 PM 3/10/2004 -0500, you wrote: > >May I *strongly* recommend that you do not send bounce notices for virus > >emails? A large percentage of the virus emails these days are from forged > >senders, so by producing and sending a bounce notice, you are - in effect - > >notifying an innocent party that they "have a virus", when they don't. > >If you feel you *must* notify someone, you should write some custom code to > >take the connection IP address (which delivered the mail to you) and work > >out the appropriate abuse mailbox for that domain. That would at least get > >it to the ISP of the machine which delivered the email to you. > > > >A lot of the spam activists out there are also blocking based on bounces to > >forged senders, so if you proceed you may find your mail delivery blocked > >at various locations. > > > >Just a thought... > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
