RE: RFC: virus handling
> -----Original Message-----
> From: Daniele Orlandi [mailto:daniele@xxxxxxxxxxx]
> I use amavisd-new which has support for listing viruses/worms
> that fake
> the sender's email address. Unfortunatelly the list is external to the
> actual virus scanner and has to be updated manually.
Given that the majority of new viruses forge the sender's email address, I
think the reverse would make more sense -- have a list of viruses that
*don't* forge, and only send notifications for those.