I'm a MAJOR advocate of turning off those notifications. I
can block the viruses, I can block the SPAM, but blocking those damn
notifications is a pain.
If you can actually get the sender/recipient
notification to work as advertised do let me know. I've just disabled them
entirely.
I reported a bug with this quite a while ago that, to my
knowledge, has still not been fixed.
ie what I was
seeing...
I made up this little table based on my domain settings (only recipient
enabled at a server level):
|
Set |
|
Actual |
|
|
Sender |
Recipient |
Sender |
Recipient |
|
0 |
0 |
1 |
0 |
|
1 |
0 |
1 |
1 |
|
1 |
1 |
1 |
1 |
|
0 |
1 |
1 |
0 |
Ie if neither is flagged the sender still gets it. If sender is flagged both sender and recipient get it, etc
Jon Benson
Mail/DNS/Linux
Administrator
OzHosting.com
> -----Original
Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
>
Behalf Of Peter Lakanen
> Sent: Thursday, 12 February 2004 11:15
AM
> To: [EMAIL PROTECTED]
> Subject: [Modus] Threat To Report Me for
Mail Abuse Due to Modus Virus
> Warnings
>
>
> * This is
the modus mailing list *
>
>
> Thanks for the quick response,
Jerod! Sorry I missed the previous
> discussions. I assume you
mean to turn them off entirely.
>
> So I should disable the sender
notification, but leave the recipient
> notification on, right? Or
is there some reason why I should
> turn off
> the recipient as
well?
>
> Thanks!
>
>
-peter
>
>
>
> Jerod Powell wrote:
>
> >
* This is the modus mailing list *
> >
> > Peter,
>
>
> > We have talked about this subject at length on this
list
> and the general
> > consensus is that as a mail admin you
should probably turn off your
> > virus notifications...too many
viruses these days spoof
> addresses and it
> > is highly likely
that 90% of the messages you send out are
> not to the
> > actual
sender of the virus. My advice, turn off notifications.
>
>
> > Jerod
> >
> > -----Original
Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On
> > Behalf Of Peter Lakanen
> > Sent: Wednesday, February
11, 2004 4:07 PM
> > To: Modus List
> > Subject: [Modus]
Threat To Report Me for Mail Abuse Due to
> Modus Virus
> >
Warnings
> >
> > * This is the modus mailing list *
>
>
> >
> >
> > Apparently someone got a
"potentially harmful content"
> warning from my
> > mail server
today. He sent me this message:
> >
> >
> >
-BEGIN-
> >
> > MyDoom forges headers. I never sent you
any such message.
> >
> > You're spamming me with these
incorrect error messages!
> > Please turn them off. If you
persist, I will blackhole
> > your domain and report platinumweb.com to
mail abuse sites.
> >
> > Thank you.
> >
> >
-END-
> >
> >
> > I sent him this response:
>
>
> >
> > -BEGIN-
> >
> > Dude.
>
>
> > Reporting me for mail abuse because of virus warnings
>
(legit or not) is
> > pretty extreme.
> >
> > My
server is not being abusive. My clients want to be
> notified and
want
> >
> > people sending them messages to be notified when
they
> receive messages
> > filled with viruses.
>
>
> > Yeah, it sucks that some of these mail viruses spoof
the
> FROM address,
> > but just like every other mail virus, in
a couple more weeks, these
> > nuisance messages will die down.
>
>
> > I welcome a dialogue with you regarding this and I will
investigate
> > turning off messages to only your domain, but I don't
think
> I can do it.
> >
> > Faced with the
choice of turning off all warning messages
> for all my
> >
clients because you're upset that some virus is spoofing
> your address
or
> >
> > leaving them on and you getting a few messages is
an easy
> decision for
> > me.
> >
> > As an
alternative, why don't you dig through the mail
> headers and
track
> > down the machine with the virus spoofing your address and go
after
> > it/them? If I can assist by providing any info to you,
I
> will be happy
> > to.
> >
> > Of course,
there is another option which is that some
> machine on your
> >
network is infected and is sending out these messages without your
> >
knowledge. These addresses usually come out of address
> books - so
it
> > could be a machine on your network or from a machine
>
external to your
> > network with both our addresses (yours and mine)
in its
> address book.
> > Are you sure you're clean?
>
>
> > Hope we can work this out amicably.
> >
> >
-peter
> >
> > -END-
> >
> >
> >
Can I block just his domain from getting these notifications?
>
>
> > Anyone have any comments on what else I can do to
handle
> these types of
> > situations?
> >
> >
Are virus notifications really justitification for
> reporting me for
mail
> >
> > abuse?
> >
> > I welcome
feedback from the Modus community.
> >
> > Thanks!
>
>
> > -peter
> >
> >
>
>
>
--
> Peter Lakanen
[EMAIL PROTECTED]
> Platinum Web Development
http://www.platinumweb.com
> 1320
Terrace Street Tallahassee, FL 32303
>
850.508.4518 FAX: 850.681.1930
>
>
> **
> To
unsubscribe, send an Email to: [EMAIL PROTECTED]
> with the word
"UNSUBSCRIBE" in the body or subject line.
>
