"OMG YOU SENT TEH VIRUSESS"

[Scott Silva]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jason Balicki said the following on 6/15/2005 3:26 PM:
> As an update to this, I received a response today.
> 
> Does anyone have any ammo I can use in response to
> this:
> 
> Begin quote:
> As for the virus notifications, as pointless as it may seem to you, it's
> our company policy to attempt to inform possibly infected systems
> (whether they are forged or not) if they have sent us an infected
> message and/or spam.  This company policy has proven effective on many
> occasions over the past 7 years of having internet capable e-mail.  In
> one such case we alerted a very large public safety organization of a
> virus breakout on their network.  
> 
> If our policy is causing grief for your mailing list, let me know which
> software you are using to manage it, I will personally do the research
> to show you how to properly filter out these messages.
> 
> No-where in the RFC for SMTP mail does it cover virus notifications.  In
> fact, the concept of silently deleting messages that could not be
> delivered can be construed as contravening the RFC 1123.  Once an SMTP
> system accepts the message with th 250 (OK) message in response to the
> DATA command, it has the responsibility of delivering the message or
> informing the sender (via return-path or from header).  If you can point
> out a relevant RFC that prohibits these notifications, I will officially
> turn them off.
> End quote.
> 
> --J(K)
> 

But they are not informing the "sender" they are informing the other
collateral victim.

-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!