i have a problem with implementing the AV-checking. as far as i've seen, the sender of a virus is receiving a mail in return, that his mail was intercepted by the AV-software. is it possible to switch this mailing off or at least configure the output of that mail ? my problem on the current behavior (i.e. notifying the sender of the virus) is, that it is a wrong assumption that the 'listed sender' is really the sender. currently nearly 90% of the virussen have faked addresses. thanks -ulrich-