On Wednesday 14 July 2004 12:58 pm, Gavin Aiken wrote: > I receive a number of > emails every day with the SomeFool, LovGate and Bagle worms - these all use > forged 'from' addresses so bouncing the message back is usually not useful > at all (and clogs up the mail server). In fact I have had a number of > emails from people asking about the email they have supposedly sent me we > are tedious to explain if people don't know about spoofing. However, on the > other hand, if someone I know sends me a Word document with a macro virus, > I definitely want my mail server to bounce the message back to them so they > know there's a problem, that I haven't received their email and they need > to sort out the virus. So I don't want to stop sending some bounces. > > So, what would be great would be a feature in the milter where we could > only send bounces out to certain worms or viruses, and not bother with the > ones that are known to spoof From addresses. What does everyone think? Or > has anyone already come up with a way to do that, that they would like to > share?
http://www.mailscanner.info has this feature, and lots of others too. Regards, Antony. -- Never write it in Perl if you can do it in Awk. Never do it in Awk if sed can handle it. Never use sed when tr can do the job. Never invoke tr when cat is sufficient. Avoid using cat whenever possible. Please reply to the list; please don't CC me. ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
