[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

Matt Cuttitta mcut at umich.edu
Thu Jun 30 08:42:58 EDT 2005


On Wed, 29 Jun 2005, Matthew.van.Eerde at hbinc.com wrote:

> Sober uses its own SMTP engine:
> http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.k@mm.html
>
> So if you reject, the virus will presumably not bother to send a bounce message.

What if i have mail forwarded from mcut at blah.com to my address and 
blah.com doesn't do virus scanning?  Then the message gets forwarded, 
rejected because it has a virus, and blah.com generates a bounce message 
even though the virus had its own SMTP engine.

Matt



More information about the MIMEDefang mailing list