You are making all sorts of dubious assumptions about the ability to
manage the
decentralised boxes, that two layers of security is not good value, that you don't
want a central monitor of attack activity and so on.
Actually, the crux of this argument was whether AV software should be in
Fedora Core.
Additionally I think scanning all mail for something which only affects
some of the systems is:
1. enabling users to use unsafe programs
2. encouraging continued questionable practices
3. increasing the workload by duplicating effort.
- spend more time making your client control efforts work and less
time upgrading the virus definitions on your mail server
-sv