Ralf Guenthner wrote:

> Guys, it's not quite as stated before here. The headers of that particular
> e-mail clearly show that the virus was posted to this mailinglist, it was
> not merely a forged from: address. My qmail-scanner quarantined it and is
> intelligent enough to recognize the sender is a mailinglist and didn't send
> a notification. Great work by the programmer of qmail-scanner.

In general, though, virus scanners should not notify the sender at all
(mailing list or not).

The majority of viruses these days forge both the From: address and the
envelope-sender. Even if the headers aren't forged, notifyiing someone that
they have a virus is likely to have little or no effect in most cases.

Also, correct me if I'm wrong, but if such a notification *is* sent, wouldn't
it make more sense to send it to the envelope-sender of the message?

I will say that I'm slightly surprised that the list doesn't reject messages
from non-members (sorry for the double-post yesterday, btw).


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to