[Mimedefang] Mimedefang 2.36 and how to drop a blocked attachment message - action_bounce?

Jim McCullars jim at info.uah.edu
Sun Sep 28 22:30:01 EDT 2003


On Sun, 28 Sep 2003, John Scully wrote:

> Action_bounce is going to bounce it back to the "sender"

   This is just not true.  Action_bounce will simply return an SMTP
reject.  Only if the sending MTA tries to bounce the message will a
(usually faked) sender receive a bogus return.  In the case of SoBig, the
infected PC ties to contact the addressee's MX directly.  If, for example,
they contact my email relay, they get a 5XX return and that's it.  I have
never heard evidence that the infected PC will then turn around and send a
bogus return to the faked sender address.

Jim





More information about the MIMEDefang mailing list