Declude never sees it anyway; never makes it to the queue. It errors on the RCPT TO: line. With the Refuse Null Senders box checked, it errors one command earlier, on MAIL FROM. Probably not enough to make a difference.
----- Original Message ----- From: "Mark Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 22, 2004 2:21 PM Subject: RE: [Declude.Virus] Attack? > What about just disabling Null senders in Imail? > > Of course this means that most "Out of office" messages will not make their > way into your system but it takes the load off of Declude. > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Donn Bly > > Sent: Wednesday, September 22, 2004 9:55 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.Virus] Attack? > > > > If the bounce messages give you enough header information to > > track the orignating IP you can complain to the guy's > > upstream, but my experience is that most of these guys these > > days are using distributed zombie machines and all you end up > > with is a bunch IP's of spyware infected residential users -- > > but it is still worth checking. > > > > Since the messages don't originate from you or travel through > > your network, there are no technical means that you can > > deploy to prevent this from happening. > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of Stan Buck > > > Sent: Wednesday, September 22, 2004 8:38 AM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.Virus] Attack? > > > > > > > > > I turned on the nobody alias for a few minutes, and the > > messages are > > > actual bounce messages from postmasters who are getting spam from > > > someone forging our return address. Very active spammer. > > Anything we > > > can do? > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
