[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications
Matthew.van.Eerde at hbinc.com
Matthew.van.Eerde at hbinc.com
Wed Jun 29 19:31:03 EDT 2005
Matthew.van.Eerde wrote:
> I suppose if Sober forges a sender of
> annie at annie.example.com
> and sends to
> bob at bob.example.org
> which .forwards to
> charlie at charlie.example.net
> and bob.example.org accepts the mail
> and charlie.example.net rejects it
> then bob.example.org encapsulates the virus in an NDR to
> annie at annie.example.com then annie at annie.example.com opens it and
> gets infected
>
> then Annie might get upset.
But if charlie.example.net issues a reject command like
550 email message contains SOBER virus
then bob.example.org should include this reject message in its NDR.
So Annie would only have herself to blame if she opened it, right?
If annie.example.com rejected the NDR, then the whole message would drop into bob.example.org's badmail directory.
If bob.example.org's mail admin was browsing the badmail directory and infected himself, who does he blame?
--
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"
More information about the MIMEDefang
mailing list