Re: [Cooker] How can we stop the virus flooding

[Guillaume Rousse]

Ainsi parlait Keld J�rn Simonsen :
> On Mon, Aug 25, 2003 at 10:13:18PM +0200, Guillaume Rousse wrote:
> > Ainsi parlait Keld J�rn Simonsen :
> > > How can you stop the virus flooding in cooker?
> > >
> > > And the MTA should not send any messages back when this is done, as the
> > > sender most likely is not the real sender.
> >
> > the REJECT directive here just send the mail back to the real sender
> > during the STMP transaction, which is the virus here.
>
> Hmm, has the virus implemented its own MTA? I know too little on the
> implementation on current sobit.f .
All current worms/virus do it, to ensure the mail is properly sent. Otherwise, 
the mail gateway could reject the mail as the faked sender doesn't belong to 
the domain.
-- 
Guillaume Rousse
The enemy never monitors your radio frequency until you broadcast on an 
unsecured channel
                -- Murphy's Military Laws n�81