Over 1/2 the MyDoom emails we are receiving are being sent to users that don't even exist, as in, [EMAIL PROTECTED]
Is anyone else seeing this
Yes. Mydoom has a built-in dictionary attack. It has hundreds of common names ("mary", "joe", etc.) that it uses to generate addresses to send to and to pretend to be from.
and is there any way to stop these emails before all the scanning is done on them?
If you do not use a "nobody" alias, they should automatically bounce.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
