[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

WBrown at e1b.org WBrown at e1b.org
Wed Jun 29 13:58:11 EDT 2005


mimedefang-bounces at lists.roaringpenguin.com wrote on 06/29/2005 01:34:39 
PM:

> I think you'll change your mind about this the day some virus spews
> thousands of emails with *your* address forged as the sender through
> a relay that doesn't block it, a very likely event if you've sent
> email to a lot of people.  Your smtp rejection forces the sending
> relay to construct a bounce message which is almost certain to be
> to a forged return address - I don't think any viruses in the past
> several years have sent with the real user name.  When it's your return
> address involved, you might wish everyone just dropped viruses quietly.

Basically, that would have to be an open relay and most of the world 
blocks open relays.  There aren't that many around any more. 

Once we get to SPF/SenderID/Domain keys, or whatever authentication 
mechanism eventually gets adopted, this will really drop off.



More information about the MIMEDefang mailing list