sobig and MS headers - correction

[Thomas DuVally]

Upon further investigation, the first point I made is moot.  I don't
think MS cares what the header states as far as scanning goes. I was
reading the part about header appending, etc in the config file and
though it had to do with actual scanning.

BUT, the headers from the virus is there.

Sorry for the "replying to my own post" thing, but I want to be sure
this is correct.

On Tue, 2003-08-19 at 10:31, Thomas DuVally wrote:
> I'm getting reports of an "X-Mailscnner: Found to be clean" header in
> the sobig.f e-mails.
>
> I've actually seen one like this.  I know we didn't add it, because we
> change the default to be something else.  Is this an attempt to:
>
> 1) Slide through sites that don't scan twice.
> 2) Discredit MS
> 3) Both?
>
> Hmm.
> --
> Thomas J. DuVally
> Lead Systems Prog.
> CIS, Brown Univ.
>
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x15F233F6
--
Thomas J. DuVally
Lead Systems Prog.
CIS, Brown Univ.

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x15F233F6