RE: RFC: virus handling

[David Brodbeck <DavidB () mail interclean com>]

> -----Original Message-----
> From: Daniele Orlandi [mailto:daniele () orlandi com]

> I use amavisd-new which has support for listing viruses/worms 
> that fake
> the sender's email address. Unfortunatelly the list is external to the
> actual virus scanner and has to be updated manually.

Given that the majority of new viruses forge the sender's email address, I
think the reverse would make more sense -- have a list of viruses that
*don't* forge, and only send notifications for those.