* This is the modus mailing list *

Peter,

We have talked about this subject at length on this list and the general
consensus is that as a mail admin you should probably turn off your
virus notifications...too many viruses these days spoof addresses and it
is highly likely that 90% of the messages you send out are not to the
actual sender of the virus.  My advice, turn off notifications.

Jerod

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Peter Lakanen
Sent: Wednesday, February 11, 2004 4:07 PM
To: Modus List
Subject: [Modus] Threat To Report Me for Mail Abuse Due to Modus Virus
Warnings

* This is the modus mailing list *



Apparently someone got a "potentially harmful content" warning from my 
mail server today.  He sent me this message:


-BEGIN-

MyDoom forges headers.  I never sent you any such message.

You're spamming me with these incorrect error messages!
Please turn them off.  If you persist, I will blackhole
your domain and report platinumweb.com to mail abuse sites.

Thank you.

-END-


I sent him this response:


-BEGIN-

Dude.

Reporting me for mail abuse because of virus warnings (legit or not) is 
pretty extreme.

My server is not being abusive.  My clients want to be notified and want

people sending them messages to be notified when they receive messages 
filled with viruses.

Yeah, it sucks that some of these mail viruses spoof the FROM address, 
but just like every other mail virus, in a couple more weeks, these 
nuisance messages will die down.

I welcome a dialogue with you regarding this and I will investigate 
turning off messages to only your domain, but I don't think I can do it.

  Faced with the choice of turning off all warning messages for all my 
clients because you're upset that some virus is spoofing your address or

leaving them on and you getting a few messages is an easy decision for
me.

As an alternative, why don't you dig through the mail headers and track 
down the machine with the virus spoofing your address and go after 
it/them?  If I can assist by providing any info to you, I will be happy
to.

Of course, there is another option which is that some machine on your 
network is infected and is sending out these messages without your 
knowledge.  These addresses usually come out of address books - so it 
could be a machine on your network or from a machine external to your 
network with both our addresses (yours and mine) in its address book. 
Are you sure you're clean?

Hope we can work this out amicably.

-peter

-END-


Can I block just his domain from getting these notifications?

Anyone have any comments on what else I can do to handle these types of 
situations?

Are virus notifications really justitification for reporting me for mail

abuse?

I welcome feedback from the Modus community.

Thanks!

-peter


-- 
   Peter Lakanen   [EMAIL PROTECTED]
   Platinum Web Development  http://www.platinumweb.com
   1320 Terrace Street  Tallahassee, FL 32303
   850.508.4518   FAX: 850.681.1930


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to