[Mimedefang] Mimedefang 2.36 and how to drop a blocked attachment message - action_bounce?
Jim McCullars
jim at info.uah.edu
Sun Sep 28 22:30:01 EDT 2003
On Sun, 28 Sep 2003, John Scully wrote:
> Action_bounce is going to bounce it back to the "sender"
This is just not true. Action_bounce will simply return an SMTP
reject. Only if the sending MTA tries to bounce the message will a
(usually faked) sender receive a bogus return. In the case of SoBig, the
infected PC ties to contact the addressee's MX directly. If, for example,
they contact my email relay, they get a 5XX return and that's it. I have
never heard evidence that the infected PC will then turn around and send a
bogus return to the faked sender address.
Jim
More information about the MIMEDefang
mailing list