Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Kris Kennaway
On Wed, May 12, 2004 at 11:00:52PM -0400, Bob Perry wrote:
 Just setup mutt and I've begun to notice mail return to me 
 indicating that it did not pass the server content filter, 
 etc.  The last one stated that a virus was found, file name 
 disco.zip, virus name W32/[EMAIL PROTECTED] and apprarently 
 was found by McAfee Scanning Engine (4359/4.3.20).  What 
 makes it worse is that the recipient is not recognizable.
 
 I understand that my system can be used as a mail relay and 
 would like to know how to combat this.  Can anyone point me 
 in the right direction so that I can quickly resolve this 
 issue?

Welcome to the 21st century internet. Forged emails from viruses are
routine, and misconfigured email systems that complain to the forged
sender address are common.  Either complain to the administrators of
the system that send you the bogus reply or just learn to ignore them.

Kris


pgp0.pgp
Description: PGP signature


Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Dan Nelson
In the last episode (May 12), Bob Perry said:
 Just setup mutt and I've begun to notice mail return to me indicating
 that it did not pass the server content filter, etc.  The last one
 stated that a virus was found, file name disco.zip, virus name
 W32/[EMAIL PROTECTED] and apprarently was found by McAfee Scanning
 Engine (4359/4.3.20).  What makes it worse is that the recipient is
 not recognizable.
 
 I understand that my system can be used as a mail relay and would
 like to know how to combat this.  Can anyone point me in the right
 direction so that I can quickly resolve this issue?

Most likely the original email never touched your system.  A virus that
selects random sender and recipients from the infected machine's
addressbook sent a message to another system with a misconfigured virus
scanner that attempted to notify the sender that they're infected (even
though viruses have been forging the sender address for years).

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Return Delivery of Mail I've never Sent

2004-05-12 Thread Viktor Lazlo
On Wed, 12 May 2004, Bob Perry wrote:

 Just setup mutt and I've begun to notice mail return to me
 indicating that it did not pass the server content filter,
 etc.  The last one stated that a virus was found, file name
 disco.zip, virus name W32/[EMAIL PROTECTED] and apprarently
 was found by McAfee Scanning Engine (4359/4.3.20).  What
 makes it worse is that the recipient is not recognizable.

 I understand that my system can be used as a mail relay and
 would like to know how to combat this.  Can anyone point me
 in the right direction so that I can quickly resolve this
 issue?

If the bounced email contains headers check to see if it originates from
your IP--most likely it is spoofing the return address.

Cheers,

Viktor
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]