[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: RFC: virus handling
- To: "'Daniele Orlandi'" <daniele@orlandi.com>, bugtraq@securityfocus.com
- Subject: RE: RFC: virus handling
- From: David Brodbeck <DavidB@mail.interclean.com>
- Date: Tue, 3 Feb 2004 10:50:58 -0500
> -----Original Message-----
> From: Daniele Orlandi [mailto:daniele@orlandi.com]
> I use amavisd-new which has support for listing viruses/worms
> that fake
> the sender's email address. Unfortunatelly the list is external to the
> actual virus scanner and has to be updated manually.
Given that the majority of new viruses forge the sender's email address, I
think the reverse would make more sense -- have a list of viruses that
*don't* forge, and only send notifications for those.