[Mimedefang] Accuracy of infected IP in mdlog

[David F. Skoll]

On Mon, 17 May 2004, Jerome Tytgat wrote:

> When you provide network access to more than 10000 computers, it's less
> time consuming to alert someone that he is infected than to educate every
> people on the good way to use Internet and to be preserved from infections
> and attacks.

Actually, there's a very large ISP in Canada (Sympatico) that shuts down
customers if it detects that they are sending out viruses.  You don't get
your connectivity back until you have proven your machine is clean.

This, IMO, is a very responsible thing to do.  However, it can only be
undertaken by the actual ISP used by the offending computers.  By the time
mail has passed to a second ISP, the second ISP has no standing to
intervene.

Regards,

David.