> sets the %MAILFROM% var to a specific > value (ie. <unknown>) for certain viruses? (As not to incriminate the > forged sender to the recipient).
Very interesting, as this is causing much confusion in our user base. we have user who take it on themselve to notify the "forged" sender. also, the ONLYSENDIFVIRUSHAS can resolve this issue, as we can have 2 different types of recipient.eml, one with no sender adress and onlysendifvirushas klez,magistr, ... the other with skipifvirushas klez,magistr,... ----- Original Message ----- From: "Terrence Koeman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 17, 2002 2:59 AM Subject: RE: [Declude.Virus] Default eml files - Klez > How about an option that globally prevents any notifies to the forged > sender or remote postmaster & sets the %MAILFROM% var to a specific > value (ie. <unknown>) for certain viruses? (As not to incriminate the > forged sender to the recipient). > > -- > Regards, > > Terrence Koeman > > Technical Director/Administrator > MediaMonks B.V. (www.mediamonks.nl) > > Please quote all replies in correspondence. > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry > > Sent: Friday, May 17, 2002 00:03 > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.Virus] Default eml files - Klez > > > > > > > > >If I use the default "sender.eml" file will it send the > > e-mail to the > > >correct person if it catches the Klez virus? > > > > No -- there is no way of knowing who the real sender was. > > Using the latest > > default sender.eml file, no notification will be sent out to > > the sender of > > the virus (since it is forged). > > -Scott > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. > You can visit our web site at http://www.declude.com . > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
