[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

[Matthew.van.Eerde at hbinc.com]

Matthew.van.Eerde wrote:
> I suppose if Sober forges a sender of
> 	annie at annie.example.com
> and sends to
> 	bob at bob.example.org
> which .forwards to
> 	charlie at charlie.example.net
> and bob.example.org accepts the mail
> and charlie.example.net rejects it
> then bob.example.org encapsulates the virus in an NDR to
> annie at annie.example.com then annie at annie.example.com opens it and
> gets infected 
> 
> then Annie might get upset.

But if charlie.example.net issues a reject command like

550 email message contains SOBER virus

then bob.example.org should include this reject message in its NDR.

So Annie would only have herself to blame if she opened it, right?

If annie.example.com rejected the NDR, then the whole message would drop into bob.example.org's badmail directory.

If bob.example.org's mail admin was browsing the badmail directory and infected himself, who does he blame?

-- 
Matthew.van.Eerde (at) hbinc.com                 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com         Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"