[Mimedefang] Handling different viruses: discard message vs. drop attachment

Bill Maidment bill.maidment at elgas.com.au
Wed Jan 28 20:30:41 EST 2004


Kelson Vibber wrote:

> OK, I think most people here would agree that just about all modern 
> viruses generate their own messages rather than piggybacking on 
> existing mail, so for anything like Klez, Sobig, and Mydoom, the 
> obvious choice is to just discard the entire message (possibly placing 
> it in quarantine).  No bounce, no defanged message, no notification to 
> the (fake) sender, just drop it in the memory hole.
>

Wasn't the consensus last time to bounce all virus infected email with 
something like "reject=554 5.7.1 Virus ....." ? Or am I opening up 
another can of worms (pun unintended)?

Cheers
Bill



More information about the MIMEDefang mailing list