[EMAIL PROTECTED] wrote on 12/13/2004 02:03:52 
PM:

> And I don't assume that all other folks have poorly configured firewalls
> that will let viruses go straight out without passing through some form 
of
> SMTP relay.  Remember that the viruses have access to the infected PC's
> settings and can pull their SMTP relay from their mail client rather 
easily
> ... it's GOING to happen if it isn't already.

Actually, that's old school virus behavior.  A few years ago, they would 
look up the outbound relay from the mail client and use that to send their 
mail.  Recent ones have changed to sending direct.  My guess is malware 
authors found too many of the legit mail relays were running antivirus 
software hindering their efforts so they switched to sending direct.
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to