[Mimedefang] SoBig makes me rethink policy...

[Whatley, Lee (CBA)]

I've gone a step further than that.  I've been using the access.db to 
reject ANY messages comming from IP's that have sent me enough Sobig.F 
messages to show up in my graphdefang top 10 for the day.

The amount of SoBig.F my server has recieved in the last few days has 
dropped from 15,000 a day to less than 800.

Most of these IPs are people on cable and DSL so I haven't had any 
complaints yet.

-Lee

David F. Skoll wrote:
> Hi,
> 
> Because of the enormous volume of mail from SoBig, I've reluctantly
> changed my policy on viruses from action_bounce to action_discard.  All
> the stupid virus-notification messages were irritating me, and I realize
> that spurious bounce messages are just as irritating.
> 
> So I now recommend action_discard for viruses.  What a sad day for Internet
> e-mail when you have to violate (the spirit, at least) of RFC's to make
> life manageable.  Thanks, Micro$oft.
> 
> --
> David.
> _______________________________________________
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang