Home page logo

nanog logo nanog mailing list archives

Re: To send or not to send 'virus in email' notifications?
From: Leo Bicknell <bicknell () ufp org>
Date: Wed, 20 Aug 2003 13:16:30 -0400


In a message written on Wed, Aug 20, 2003 at 10:04:05AM -0700, Steve Thomas wrote:
From: Steve Thomas <nanog () sthomas net>
To: Leo Bicknell <bicknell () ufp org>
Subject: Re: To send or not to send 'virus in email' notifications?
[other headers editied]
NO! Some organizations (the company I work for, for instance) use MailScanner on incoming AND outgoing mail. I tried 
telling this to the person who sent the Postfix regex, but, of course, my mail was rejected.

MailScanner is a very widely used product, and adding rules/filters like the one above only adds to the problems that 
the virus author is trying to create. Please forward this to NANOG - I tried subscribing to NANOG-POST, but my 
subscription request was bounced with "content rejected".

Note, unlike the postfix rule his message still made it past
spamassassin has he had enough "non-spam" qualities to offset the
rule I suggested adding.

Please keep in mind there may be legitimate e-mail with these headers
if you're going to use rules such have been suggested here.

       Leo Bicknell - bicknell () ufp org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/
Read TMBG List - tmbg-list-request () tmbg org, www.tmbg.org

Attachment: _bin

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]