Sobig getting tagged as spam not virus

[John Rudd]

Actually, you probably do want to bounce them.  Not because of the
spoofed virus senders, but because the rules aren't 100% accurate, and
you want the non-virus senders to know that their mail was blocked, and
that they can re-try it with a different subject.



Timothy VanFosson wrote:
>
> Since the return addresses are likely spoofed, you probably want to discard
> these rather than return an error message.
>
> tv
>
> At 12:15 PM 8/22/2003 -0700, you wrote:
> >It helped me, but more inspirationally than directly.  Your lines didn't
> >work with my version of sendmail (8.10.1 ; don't tell me to upgrade,
> >that's already in the works, only not to a newer sendmail, to
> >communigate pro).  Here's what I put, as the first REWRITING RULE:
> >
> >SCheck_subject
> >R${Msobig1} $*          $#error $: 550 ${Mmsg}
> >R${Msobig2} $*          $#error $: 550 ${Mmsg}
> >R${Msobig3} $*          $#error $: 550 ${Mmsg}
> >R${Msobig4} $*          $#error $: 550 ${Mmsg}
> >R${Msobig5} $*          $#error $: 550 ${Mmsg}
> >R${Msobig6} $*          $#error $: 550 ${Mmsg}
> >R${Msobig7} $*          $#error $: 550 ${Mmsg}
> >R${Msobig8} $*          $#error $: 550 ${Mmsg}
>
> --
> Timothy VanFosson, Manager         E-mail: timv at ccad.uiowa.edu
> Computing Services, Web Master    WWW: http://www.ccad.uiowa.edu/~timv/
> Center for Computer-Aided Design   US Mail: The University of Iowa
> Phone: (319) 335-6298                      208 ERF
> FAX: (319) 384-0542                        Iowa City, Iowa 52242
>
> What good is it for a man to gain the whole world, yet forfeit
> his soul? Or what can a man give in exchange for his soul?