[Mimedefang] delete spam based on score

[David F. Skoll]

On Tue, 25 Nov 2003 WBrown at e1b.org wrote:

> Probably not on most of the virii that include their own SMTP engines.  My
> guess is that they ignore the failure instead of passing it on to the
> forged sender.  If it's an older virus, then yes, you may send it to an
> innocent person.

An analysis of my log file indicates that about 75% of "modern" viruses
propagate through a real SMTP server rather than (or perhaps in addition
to) containing their own SMTP engine.

I determined this by doing a reverse lookup of the relays, and assumed that
names like "mail-5.tiscali.it" and "smtp-out2.blueyonder.co.uk" are real
mail servers.

Regards,

David.