List Info

Thread: Re: Brand-new viruses, banned content and spamassassin




Re: Brand-new viruses, banned content and spamassassin
user name
2007-01-21 09:41:44
Giampaolo wrote:

> The problem is that, when a banned mail gets defanged
and forwarded to its recipient,
>  it bypasses any spam check by SpamAssassin, which is
not what I would expect. I would
>  instead expect that every
> banned mail gets also checked against SA. This would
avoid delivering most of the mails
>  carring undetected viruses since I see that these mail
score really high when manually
> checked against SA:
> their score is at least 12. Also, a not-yet detected
virus is much more an hazard then
>  a detected one, since I can expect that also the AV
sitting on my clients' PCs is probably
>  unable to detect
> them. Thereby, these PCs may easily get infected.

> I temporarly stopped delivering banned mails to
recipients, but this can't be a long-term
>  solution. So, what I'm expected to do to allow mails
with banned content to also get
>  a spam check? Anybody knows?

> Giampaolo

I believe you can send banned files and still have spam
checks
performed by bypassing banned checks (but it's still a good
idea to
include the recipients as lovers if you want to insure
delivery) but
then you would not have the benefit of defanging. The
meaning of a
lover is to insure delivery. If a message is not blocked by
previous
tests (in this case virus checks) then the message will be
delivered. It
might be a nice feature however to allow processing to
continue on to
spam checks when the recipient is a banned lover. This would
have to be
customizable as not everyone would desire this behavior. The
next question
is about virus lovers - would you want tests to continue on
to banned
checks and spam checks too? That does not seem to make
sense. Both
cases dilute the meaning of being a lover. In general would
you have
all checks performed and then have a lower priority test
block mail even
if a person was a lover of a higher priority test? The
recipients must be
aware that if they choose to receive banned files (and they
want them
defanged) then they run the risk of receiving undetected
viruses.

Gary V


------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief surveys -
and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )