[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications

Kelson kelson at speed.net
Thu Jun 30 12:32:38 EDT 2005


WBrown at e1b.org wrote:
> My address would have to be forged by a virus that uses a relay, and most 
> of the current viruses are direct to MX with their own SMTP engines.  In 
> these cases this is moot.  The message just dies with 550.

Expect this to change as more ISPs start filtering outgoing SMTP 
connections.  All a virus (or spam zombie) has to do is extract the 
settings from the user's mail config and send via the ISP's relay.

Depending on how the app stores the password, it may even be possible to 
use SMTP AUTH.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>



More information about the MIMEDefang mailing list