, August 24, 2003 12:40 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] No wonder viruses spread
But since the subject that you are receiving is undeliverable : RE:
Details isn't that his server is just returning the message Unless the
virus has more subjects then the list of subjects that I am
So if a forged user from my domain sends a message to another IMAIL machine
to a user that doesn't exist and then their Imail Machine rejects the
message. I'm assuming that postmaster gets the entire message (virus
included) based upon the forged domain.
Actually, you should be safe on either
Um - I'm not sure, but I think he may be right. The declude virus catch
looks like a bounce from his server, not sent through his server. As
you said the e-mail address is forged - so if an infected computer has a
user from your domain and a bad address from his, once his server can't
deliver
when his server bounced it back to you.
Maybe? I'm hoping someone else jumps in
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Dodell
Sent: Sunday, August 24, 2003 11:17 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] No wonder viruses
But since the subject that you are receiving is undeliverable : RE:
Details isn't that his server is just returning the message Unless the
virus has more subjects then the list of subjects that I am aware of.
Comparing it to the headers generated by the copies of Sobig.F we've looked
at, it
Received: from guava.uch.edu [168.200.2.37] by stat.com with ESMTP
(SMTPD32-8.02) id A94AD300BE; Sat, 23 Aug 2003 13:06:34 -0700
Received: from mail pickup service by guava.uch.edu with Microsoft
SMTPSVC;
Sat, 23 Aug 2003 14:06:33 -0600
Received: from uchaex2.uch.ad.pvt