Easier, do not send the notifications out at all for viruses like this. 

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Matt
> Sent: Tuesday, January 27, 2004 2:53 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.Virus] Forging recipients for gateway customers, bounce
> overload
> 
> With this virus now forging recipients as well as issues related to dead
> accounts being hammered by other viruses, I'm wondering what could be
> done to help control the bounces to postmaster notifications besides
> using a unique address and using IMail rules to delete any replies to it.
> 
> Most system notifications come by way of the null SMTP sender, <>, while
> having a valid address in the from field.  If I'm not mistaken, Declude
> Virus can't be configured this way.  As a result, my postmaster box
> fills up with bounce notifications for fake and dead addresses that we
> are gatewaying for.  While we currently aren't gatewaying that much
> E-mail, the number of notifications in this outbreak alone has been
> about 3 per gatewayed user today alone.   With more business, this could
> well become unmanageable.
> 
> So is there any way to get Declude Virus to send a From address like
> [EMAIL PROTECTED], and a SMTP envelope address of <> in order to
> control the bounces?
> 
> Thanks,
> 
> Matt
> 
> --
> =====================================================
> MailPure custom filters for Declude JunkMail Pro.
> http://www.mailpure.com/software/
> =====================================================
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to