[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

[James Ebright]

Rejecting the infected message to the MTA is not the same as bouncing it, you
got all that blow-back from bounces (or your own users were infected and
sending it out... more likely bounces).

Rejecting the message tells the sending MTA that you never accepeted it during
the conversation (ala 5XX return code), never creating a "bounced" message
from your end.. ala no additional traffic on your end.

Jim

On Wed, 29 Jun 2005 12:20:12 -0400, Chris Gauch wrote
> I tend to avoid outright rejecting viruses because it just generates 
> more unnecessary traffic and we don't particularly like dealing with 
> the numerous rejections ourselves, and do our best to outright 
> block/reject all of the "bogus virus warnings" sent from other MX 
> hosts (thanks to all of the spoofing that goes on with virus-
> generated emails on infected, zombie PCs external to any of our 
> networks).


--
EsisNet.com Webmail Client