[Mimedefang] FW: final fillter setup

Matthew.van.Eerde at hbinc.com Matthew.van.Eerde at hbinc.com
Tue May 11 12:52:39 EDT 2004


> From: Andrew Jayes [mailto:andrew.jayes at visitheartofengland.com]
> " It would be useful to tell the owner of the infected PC, but there is
> no way to determine who it is."
> 
> Unless the mail is 'not forged' and was actually sent by that 
> sender address.
> 
> Andrew

action_bounce() works wonders here.  Only people who actually want the
undeliverable will get it.  Forged From: addresses are ignored.

This is because it reports the failure to the SENDING MTA... and does not
generate a new message.

Most viruses nowadays use their own sending MTA which will simply ignore the
5xx code.

Matthew.van.Eerde at hbinc.com                805.964.4554 x902
Hispanic Business Inc./HireDiversity.com   Software Engineer
perl -e"print join er,reverse',','l hack',' P','Just anoth'"



More information about the MIMEDefang mailing list