Good call, Peter. Here's a guy who's starting to compile a bunch of SpamAssassin rules for the virus bounce messages, might give you some starting points for your filters. I use SpamAssassin, but I intend to just reject them out-of-hand during the SMTP conversation before it ever gets that far. This isn't the first time this has happened, it's just the worst. I'm now convinced these things are less than worthless, and I'm gonna 550 them at the gateway.
http://www.exit0.us/index.php/VirusBounceRules -tom > -----Original Message----- > From: Durkee, Peter [mailto:[EMAIL PROTECTED] > Posted At: Wednesday, August 20, 2003 6:24 PM > Posted To: MSExchange Mailing List > Conversation: Antivirus notifications > Subject: RE: Antivirus notifications > > > I could not possibly agree more! I've taken to blocking some > of the more common AV auto-replies with my spam filters. > > -Peter > > > -----Original Message----- > From: Tom Meunier [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 20, 2003 15:24 > To: Exchange Discussions > Subject: Antivirus notifications > > > Could all you folks with the misconfigured AV servers please > disable auto-replying to the spoofed FROM: lines in the > latest generation of viruses? Jeez. It's worse than the > stupid virus. The virus gets dumped and nobody ever sees it, > but the NDRs and virus alerts go to people who didn't send > the message, don't have a virus, and freak out. > > -tom _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
