[clamav-users] Clamav-milter finds postive, goes to hold queue

[Andrew C Aitchison]

On Tue, 23 Feb 2021, Joe Acquisto-j4 wrote:
> Wondering now what people generally do with infected mail?  That is, is there a
> general consensus?
>
> Would it be "safe" (for the systems) to simply send the mail through, to the end
> use and merely tag the subject line with "Virus Detected" as SPAM messages
> are done?   Send them to a quarantine mailbox for human review?  Notify an
> administrator there is email being "held"?

No.
Assuming that Postfix received the message by SMTP (unless you know 
different, this is very likely) it should be able to *reject*
the message when it detects the infection.
This leaves the problem with the sending system.

-- 
Andrew C. Aitchison                                     Kendal, UK
                         andrew at aitchison.me.uk