SWEN

[Antony Stone]

On Wednesday 24 September 2003 1:53 pm, Rodney Green wrote:

> Greetings!
>
> I'm new to MailScanner. I'm using it with Postfix.
>
> I'm looking for a way to prevent the Swen virus messages from making it
> to our users. I searched the archive and found a message asking people
> to add "Swen Gibe" to our silent viruses list. How does this work?  Do I
> add "Swen Gibe" without the quotes? I'm a bit confused as to how the
> silent virus restriction works. Can someone clarify this for me?

So-called Silent Viruses are ones which forge the sender's address, so that
there's no point in bouncing an email back to the apparent sender, telling
them their machine is infected, because it would go to someone else.

By putting the names of such viruses into the list of Silent Viruses in
MailScanner.conf, you can control which viruses will result in the sender
being informed, and which will not.

Look at the Silent Viruses line in MailScanner.cond to see an example of the
correct format.

However, note that it is *not* the "Sender: " header in the email itself
which the message gets sent back to, it is the SMTP Envelope sender address,
and from everything I have seen, this is *not* forged by Swen / Gibe.

My opinion is that this particular virus should not be added to the silent
list, and my server is successfully sending bounces back to the true senders
of this virus.

Klez is a good example of a virus which should be in this list.

Regards,

Antony.

--

Most people are aware that the Universe is big.

 - Paul Davies, Professor of Theoretical Physics