* This is the modus mailing list *

Peter, we also liked for our customers to get information that we
successfully blocked a virus from them or saved them from embarassment for
having a virus but the price in terms of handling the bounced messages and
unfriendly admins was too high. With the quarantine reporting function it
isn't necessary either as the customer will get a daily report of how many
viruses we saved them from. In order for selective sender notification to be
useful the server software would need to know for each virus wheather it
tends to use valid addresses or spoofed ones. This info would need to be
included in the virus info updates, etc.

I should also add that I am guilty of the kind of response you received from
the admin. On really bad days I tend to be a bit overbearing and let loose
on the pinheads who run Declude without a clue. It's a sure bet they aren't
reading their postmaster email either but I feel a bit better afterwards.

Mark Thornton
San Marcos Internet, Inc
512-393-5300


----- Original Message ----- 
From: "Peter Lakanen" <[EMAIL PROTECTED]>
To: "Modus List" <[EMAIL PROTECTED]>
Sent: Wednesday, February 11, 2004 6:07 PM
Subject: [Modus] Threat To Report Me for Mail Abuse Due to Modus Virus
Warnings


> * This is the modus mailing list *
>
>
>
> Apparently someone got a "potentially harmful content" warning from my
> mail server today.  He sent me this message:
>
>
> -BEGIN-
>
> MyDoom forges headers.  I never sent you any such message.
>
> You're spamming me with these incorrect error messages!
> Please turn them off.  If you persist, I will blackhole
> your domain and report platinumweb.com to mail abuse sites.
>
> Thank you.
>
> -END-
>
>
> I sent him this response:
>
>
> -BEGIN-
>
> Dude.
>
> Reporting me for mail abuse because of virus warnings (legit or not) is
> pretty extreme.
>
> My server is not being abusive.  My clients want to be notified and want
> people sending them messages to be notified when they receive messages
> filled with viruses.
>
> Yeah, it sucks that some of these mail viruses spoof the FROM address,
> but just like every other mail virus, in a couple more weeks, these
> nuisance messages will die down.
>
> I welcome a dialogue with you regarding this and I will investigate
> turning off messages to only your domain, but I don't think I can do it.
>   Faced with the choice of turning off all warning messages for all my
> clients because you're upset that some virus is spoofing your address or
> leaving them on and you getting a few messages is an easy decision for me.
>
> As an alternative, why don't you dig through the mail headers and track
> down the machine with the virus spoofing your address and go after
> it/them?  If I can assist by providing any info to you, I will be happy
to.
>
> Of course, there is another option which is that some machine on your
> network is infected and is sending out these messages without your
> knowledge.  These addresses usually come out of address books - so it
> could be a machine on your network or from a machine external to your
> network with both our addresses (yours and mine) in its address book.
> Are you sure you're clean?
>
> Hope we can work this out amicably.
>
> -peter
>
> -END-
>
>
> Can I block just his domain from getting these notifications?
>
> Anyone have any comments on what else I can do to handle these types of
> situations?
>
> Are virus notifications really justitification for reporting me for mail
> abuse?
>
> I welcome feedback from the Modus community.
>
> Thanks!
>
> -peter
>
>
> -- 
>    Peter Lakanen   [EMAIL PROTECTED]
>    Platinum Web Development  http://www.platinumweb.com
>    1320 Terrace Street  Tallahassee, FL 32303
>    850.508.4518   FAX: 850.681.1930
>
>
> **
> To unsubscribe, send an Email to: [EMAIL PROTECTED]
> with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to