[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Simple e-mail virus scanner



On Wednesday 20 August 2003 06:52 am, Yannick Van Osselaer wrote:
> On Wednesday 20 August 2003 10:52, Kjetil Kjernsmo wrote:
> > On Tuesday 19 August 2003 23:42, Noah L. Meyerhans wrote:
> > This filter will reject at SMTP-time, right? One question there? Who
> > gets the bounce? I'm getting a whole lot of bounces, and I don't want
> > to bother anyone else with bounces that go to the wrong person...
>
> The mail server that send the bounce. This is called a double bounce.
> Correct me if this is wrong ...

Yes, it goes back to the server doing the sending. Its a double bounce when 
the bounce message itself bounces.  I dont know how this virus is proigating 
itself, but I would imagine that if it does the sending itself, rejecting at 
the initial smtp session would not result in a double bounce. However, if it 
uses some relay (that it either set up itself, or found on a network, etc) 
and used forged headers, then it will go to some unsusspecting person (of 
whoever is in the headers).

Jay


-- 
Jay Kline
http://www.slushpupie.com/



Reply to: