[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications
Matt Cuttitta
mcut at umich.edu
Thu Jun 30 08:42:58 EDT 2005
On Wed, 29 Jun 2005, Matthew.van.Eerde at hbinc.com wrote:
> Sober uses its own SMTP engine:
> http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.k@mm.html
>
> So if you reject, the virus will presumably not bother to send a bounce message.
What if i have mail forwarded from mcut at blah.com to my address and
blah.com doesn't do virus scanning? Then the message gets forwarded,
rejected because it has a virus, and blah.com generates a bounce message
even though the virus had its own SMTP engine.
Matt
More information about the MIMEDefang
mailing list