[Mimedefang] ClamAV's Worm/Trojan/Joke/W97M classifications
Kelson
kelson at speed.net
Thu Jun 30 12:32:38 EDT 2005
WBrown at e1b.org wrote:
> My address would have to be forged by a virus that uses a relay, and most
> of the current viruses are direct to MX with their own SMTP engines. In
> these cases this is moot. The message just dies with 550.
Expect this to change as more ISPs start filtering outgoing SMTP
connections. All a virus (or spam zombie) has to do is extract the
settings from the user's mail config and send via the ISP's relay.
Depending on how the app stores the password, it may even be possible to
use SMTP AUTH.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
More information about the MIMEDefang
mailing list