[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications
WBrown at e1b.org
WBrown at e1b.org
Wed Jun 29 13:58:11 EDT 2005
mimedefang-bounces at lists.roaringpenguin.com wrote on 06/29/2005 01:34:39
PM:
> I think you'll change your mind about this the day some virus spews
> thousands of emails with *your* address forged as the sender through
> a relay that doesn't block it, a very likely event if you've sent
> email to a lot of people. Your smtp rejection forces the sending
> relay to construct a bounce message which is almost certain to be
> to a forged return address - I don't think any viruses in the past
> several years have sent with the real user name. When it's your return
> address involved, you might wish everyone just dropped viruses quietly.
Basically, that would have to be an open relay and most of the world
blocks open relays. There aren't that many around any more.
Once we get to SPF/SenderID/Domain keys, or whatever authentication
mechanism eventually gets adopted, this will really drop off.
More information about the MIMEDefang
mailing list