Notify the sender, but don't deliver

[Jeff A. Earickson]

<x-flowed>
Hi,

I occasionally see macro viruses (mostly Marker), but they get flagged in
my daily reports as postmaster, so I can hunt these people down myself.
As long as the "Notices to System Administrators" stuff continues to
work so I see what is going on, then I'm happy.  The users don't need
the clutter.

BTW, I got my MailScanner book yesterday.  Good reading, but too bad it
is out-of-date already! :)  Julian, you need a better picture of yourself
on the back cover.  The one that is there looks like it was taken in a
subway tunnel.  Doesn't Southhampton have a communications and photo
department that could take a better picture of you for publicity purposes?

Jeff Earickson
Colby College

On Thu, 7 Oct 2004, David Hooton wrote:

> Date: Thu, 7 Oct 2004 23:09:47 +1000
> From: David Hooton <david.hooton at gmail.com>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Notify the sender, but don't deliver
>
> On Thu, 7 Oct 2004 14:03:06 +0100, Julian Field
> <mailscanner at ecs.soton.ac.uk> wrote:
>> There is 1 problem. Some people legitimately want to warn the senders of
>> macro-viruses, which by their very nature do not spoof the From address.
>> This is what has stopped me removing it in the past.
>
> How many macro viruses have you blocked in the last 12 months as a
> percentage of all viruses blocked?
>
> I am almost confident in saying that I haven't seen one.
>
> Virus warning emails are now at a point where we have our own
> SpamAssassin rulesets to block them.  They are almost as bad at
> Barracuda Spam Firewall spam bounces!
> --
> Regards,
>
> David Hooton
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>