Hi, well, that's what IMails Anti-Virus solution would accomplish. Imail AntiVirus supposedly rejects infected messages DURING the ONGOING SMTP conversation BEFORE it is accepted. The result would be a bounce message from the SENDING mail server. Any questions regarding that bounce message would be directed at the post master of the SENDING mail server - which is the correct target. After all, only the sending post master has access to his server's own logs and can determine why and from whom THEIR mail server accepted the infected message.
If they accecpted and RELAYED an infected message to YOUR server, then they deserve to receive the bounce messages and they rightfully should be the ones doing the legwork - even if the message did not ORIGINATE at their system. If they would run a virus scanner, then THEIR mail server could have never been used to relay the infection in the first place. And if everyone did, then viruses would be stopped at the first hop. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Trent M. Davenport Sent: Tuesday, October 08, 2002 03:50 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Junkmail Notification Intelligence Scott, We've seen Klez.E, Klez.H and now Bugbear falsifying from addresses. How long before Declude will give you the option to have it use the domain name from the headers and add abuse@ in front of the actual originating sending mail server, rather than relying on the from address? Especially for those viruses that falsify the from address. I don't think we will ever be able to get rid of these types of viruses unless there is some way to accurately send messages to where the message truly originates, rather than what the domain name in the from address is. Any thoughts? From what I've seen, the originating mail server in the headers is usually not falsified. Trent ----------- Trent M. Davenport - Systems Administrator Northern Television Systems Ltd - WHTV 203-4103 4th Avenue, Whitehorse, YT Y1A 1H6 (867) 393-2225 X204, (867) 393-2224 FAX www.whtvcable.com <http://www.whtvcable.com> ( [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
