Ainsi parlait Buchan Milne :
> Guillaume Rousse wrote:
> >>And the MTA should not snd any messages back when this is done, as the
> >>sender most likely is not the real sender.
> >
> > the REJECT directive here just send the mail back to the real sender
>
> during
>
> > the STMP transaction, which is the virus here.
>
> Only when the client is sobig.f itself, if the client is another SMTP
> server's client daemon, the user listed in "From" will get a message
> from the client daemon :-(.
the virus usually directly send the mail to its target mailserver. The only
relaying would between primary mail server to secondary mail server in victim
domain, right ?
Anyway, it is safer to use DISCARD then.
--
Guillaume Rousse
Fools rush in where fools have been before
-- Sad Truths of Life n�22
