Matt, here is what I have done for MyDoom:

SKIPIFVIRUSNAMEHAS MyDoom for all gateway domains on recip.eml
SKIPIFVIRUSNAMEHAS MyDoom for postmaster.eml, otherpostmaster1.eml and
sender.eml

That is the same policy I established for Swen.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Matt
> Sent: Tuesday, January 27, 2004 3:40 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.Virus] Forging recipients for gateway customers,
> bounce overload overload
> 
> I was afraid of that...
> 
> Would it work to have a Reply-To address of <> instead?  Assuming of
> course that Declude Virus supports Reply-To and mailer daemon's would
> use the Reply-To address.
> 
> John, I'm considering this, however I have not yet come to a conclusion
> about what to do here.  Some customers may want these notifications, and
> it does show the value we offer, though the value to the end-user is
> low.  I'm not sending any sender notifications except for banned
> extensions.
> 
> Thanks,
> 
> Matt
> 
> 
> 
> R. Scott Perry wrote:
> 
> >
> >> Most system notifications come by way of the null SMTP sender, <>,
> >> while having a valid address in the from field.  If I'm not mistaken,
> >> Declude Virus can't be configured this way.
> >
> >
> > Correct (IMail's imail1.exe process, which is used to send the
> > notifications, does not allow E-mail to be sent from <>).
> >
> >> So is there any way to get Declude Virus to send a From address like
> >> [EMAIL PROTECTED], and a SMTP envelope address of <> in order
> >> to control the bounces?
> >
> >
> > I wish it was possible, but it isn't.
> >
> >                                                    -Scott
> > ---
> > Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> > Declude Virus: Catches known viruses and is the leader in mailserver
> > vulnerability detection.
> > Find out what you've been missing: Ask about our free 30-day evaluation.
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus".    The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> 
> --
> =====================================================
> MailPure custom filters for Declude JunkMail Pro.
> http://www.mailpure.com/software/
> =====================================================
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".    The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to