On Wed, 2005-09-21 at 12:28 -0400, Stuart D. Gathman wrote:
Your argument almost had me convinced, but what really clinched it
was that once my little experiment cleaned out the bogus mail from
postmaster and mailer-daemon that was really DSNs, then I started
noticing (ought to be) DSN mail from clamav ... there is no end to
fiddling with the heuristics to try and detect all the DSNs. So I
won't bother.
Is clamav a really braindead product? Or is this a user configuration
error?
It's user error. ClamAV just detects the fact that it's malware, and
isn't responsible for actually generating a reply.
This is ClamAV in operation at my site, for example...
220-pentafluge.infradead.org ESMTP Exim 4.52 Wed, 21 Sep 2005 18:14:03 +0100
220 Be gentle with me
helo me
250 pentafluge.infradead.org Hello peach.infradead.org
[2001:8b0:10b:1:230:65ff:fe7d:38c]
mail from:<postmaster(_at_)infradead(_dot_)org>
250 OK
rcpt to:<dwmw2(_at_)infradead(_dot_)org>
250 Accepted
data
354 Enter message, ending with "." on a line by itself
Message-id: <blah(_at_)blah>
X5O!P%(_at_)AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
.
550 This message contains malware (Eicar-Test-Signature)
--
dwmw2
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com