[Mimedefang] Accuracy of infected IP in mdlog

[Jonas Eckerman]

On Mon, 17 May 2004 09:14:06 +0200, Jerome Tytgat wrote:

>  no, but I wonder what is the best :
>  - telling the last relay is the spammer/infected computer which is
>  wrong at 95% when there's several relays

Where on earth did you get the notion that MIMEDefang is trying to tell you anything like that?

MIMEDefang is just logging the IP it gets from Sendmail. Sendmail just tells MIMEDefang the IP of the machine that connected to it. No more, no less.

>  - let the mailbox 
>  administrator choosing what to trust ?

This is the only way to do this, and MIMEDefang does nothing to stop you from manually reading the Received-headers unless you tell it to completely discard virus mails.

/Jonas
-- 
Jonas Eckerman, jonas_lists at frukt.org
http://www.fsdb.org/