sobig virus

[Antony Stone]

On Wednesday 20 August 2003 6:08 pm, Joe Stuart wrote:

> I was wrong it did not go through mailscanner Uly told me that some of
> the newer viruses are using lower mx records so we did some
> investigating and it turns out that the company that handles our
> external dns had an old entry for a backup mailserver that should not
> have been there that the virus was relaying through.

So....  the virus went through an old mail relay with a higher MXvalue...

Surely all that machine did was to forward the mail to the system with the
lower MX value, where it got scanned and detected?

Or am I missing something about your setup here?

Antony.

--

The first ninety percent of an engineering project takes ninety percent
of the time, and the last ten percent takes the remaining ninety percent.