[Mimedefang] Dropping e-mails generated by the Sobig Virus

[Rajesh Bhandari]

>>> olc at cs.umass.edu 08/21/03 03:26PM >>>
>On 08/21/03 at 21:02, 'twas brillig and Jakub Wasielewski scrobe:
>[...]
>> 
>> Hmm... maybe Sobig is a good reason for discard action, but think abo-
>> ut having dozen such cases. Now araises the problem to notify the user
>> about  sending virus or not to and discard. You could end up with huge
>> regexp or something like that making the decision... nasty. As we  all
>> agree  it is important to notify sender about virus infection.. if the
>> sender is not fake. The perfect solution IMO would be a possibility to
>> reject the entire e-mail in the last stage of SMTP dialog, after DATA,
>> with "450 Reason of reject". What do you think about that or maybe  it
>> is already possible with MD??
>> 
>
>	Indeed it is, using action_bounce:
>
You're right.

I run MD2.28 right now, and the man page was a little bit confusing.  I just looked ta MD2.35, and the man page is much more explicit, and mentions the SMTP reject code etc.

So yes, action_bounce is much better.  I've already changed my fiilter.

Rajesh