Home page logo

nanog logo nanog mailing list archives

RE: To send or not to send 'virus in email' notifications?
From: "John Ferriby" <john () ferriby com>
Date: Wed, 20 Aug 2003 10:32:24 -0400

Considering the amount of email traffic generated by responding to 
forged  virus laden email from culprits like sobig should email virus 
scanning systems be configured to send notifications back to 
sender or not?

IMO: No.  I have had around 200 of these alerts this morning alone,
most of which originate from POSTMASTER () somedomain which received
email using my forged address.     I can't blithely ignore the
postmaster, but I'm sorely tempted to filter them.

Side note: I'm seeing about a 20x increase in smtp traffic over
the daily norm.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]