[Mimedefang] Dropping e-mails generated by the Sobig Virus

[Jakub Wasielewski]

Dnia 21/08/2003 16:20:26 -0400, Użytkownik Rajesh Bhandari napisał:

RB> >>> olc at cs.umass.edu 08/21/03 03:26PM >>>
RB> >On 08/21/03 at 21:02, 'twas brillig and Jakub Wasielewski scrobe:
RB> >[...]
RB> >> 
RB> >> Hmm... maybe Sobig is a good reason for discard action, but think abo-
RB> >> ut having dozen such cases. Now araises the problem to notify the user
RB> >> about  sending virus or not to and discard. You could end up with huge
RB> >> regexp or something like that making the decision... nasty. As we  all
RB> >> agree  it is important to notify sender about virus infection.. if the
RB> >> sender is not fake. The perfect solution IMO would be a possibility to
RB> >> reject the entire e-mail in the last stage of SMTP dialog, after DATA,
RB> >> with "450 Reason of reject". What do you think about that or maybe  it
RB> >> is already possible with MD??
RB> >> 
RB> >
RB> >	Indeed it is, using action_bounce:
RB> >
RB> You're right.
RB> 
RB> I run MD2.28 right now, and the man page was a little bit confusing.  I just looked ta MD2.35, and the man page is much more explicit, and mentions the SMTP reject code etc.

I  had the same confusion, I thought that action_bounce produces sepa­
rate e-mail notifying sender. Now I  know  action_bounce  is  *execly*
what I was looking for.

RB> So yes, action_bounce is much better.  I've already changed my fiilter.

And so did I, thanks to Ole Craig :)

-- 
Jakub Wasielewski