OK, I think most people here would agree that just about all modern viruses generate their own messages rather than piggybacking on existing mail, so for anything like Klez, Sobig, and Mydoom, the obvious choice is to just discard the entire message (possibly placing it in quarantine). No bounce, no defanged message, no notification to the (fake) sender, just drop it in the memory hole.
Wasn't the consensus last time to bounce all virus infected email with something like "reject=554 5.7.1 Virus ....." ? Or am I opening up another can of worms (pun unintended)?
Cheers Bill _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
