[Mimedefang] Mimedefang 2.36 and how to drop a blocked attachment message - action_bounce?

[Joseph Brennan]

>    This is just not true.  Action_bounce will simply return an SMTP
> reject.  Only if the sending MTA tries to bounce the message will a
> (usually faked) sender receive a bogus return.  In the case of SoBig, the
> infected PC ties to contact the addressee's MX directly.


This is true as far as it goes, but it overlooks the situation
where the virusmail is being forwarded or relayed.  In that case
the 5xx rejection is being given to a mail server, which will
generate a bounce notice.

Joseph Brennan         Columbia University in the City of New York
Academic Technologies Group                   brennan at columbia.edu