We leave them off. The majority of today's virus' and Trojans are not from who they say they are. If we see one that is legitimate on the From address we will send a note separately.
Notifying the sender when they weren't the sender doesn't really help them know their email was hijacked. They can't use the notice to track down who really sent it so it usually just agitates the person. We do leave admin notification on though. It is also nice for not email bombing a list someone might subscribe to, such as a security list where people send sample code that is often identified by most scanners as an active code. Best Regards, Dan Bartley -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2003 08:19 To: Exchange Discussions I leave them on - it's a good indication someone is hijacking their mail accounts. -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Pfefferkorn, Pete (pfeffepe) [mailto:[EMAIL PROTECTED] > Sent: Monday, June 09, 2003 7:53 AM > To: Exchange Discussions > Subject: Virus Notifications to Sender? > > > Off topic. > > With the advent of Klez and various other viruses who spoof > the sender we are starting to get complaints from users who > are receiving the sender notifications messages from our > ScanMail virus scanner who did not actually send any virus. > I know we can turn off the notification, but then users who > are sending viruses will not get notified that they are > infected. Kind of a catch 22. I'm curious what other > administrators policies are regarding notification messages > to the sender. Have you disabled sender notifications or are > you just living with it? > > Pete Pfefferkorn > Senior Systems Engineer/Mail Administrator > University of Cincinnati > 51 Goodman Street > Cincinnati, OH 45221 > Phone - (513) 556-9076 > Fax - (513) 556-2042 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
