On Wed, 2005-09-21 at 16:47 -0400, Dick St.Peters wrote:
DSN generation is an MTA function. You're right that what the Clamav
milter calls a bounce is actually a reply, but it has little choice.
As a milter, it can return a status telling sendmail to accept or
reject the mail, but there's no "accept and bounce" status defined in
the milter API. If a milter returns a reject status, sendmail rejects
the mail, leaving DSN generation up to the client MTA (which in the
case of a Clamav milter reject is often a virus SMTP engine).
Yes, and that's absolutely how it _should_ be. You should never
accept-and-bounce; you should reject at SMTP time. If it's a legitimate
sender with a false positive, they'll get a DSN. If it's a virus SMTP
engine, it'll just move on to its next victim.
It _does_ have a choice. It can do the right thing, and either reject or
accept the mail. The fact that it has to go out of its way to do the
_wrong_ thing (accept-and-bounce) ought to have been a fairly good
hint :)
--
dwmw2
-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com