Postfix anti-antivirus (was Re: [linux-elitists] procmail recipe for mydoom?)

Karsten M. Self kmself@ix.netcom.com
Mon Feb 16 16:04:52 PST 2004


on Mon, Feb 16, 2004 at 12:01:57PM +1100, Martin Pool (mbp@samba.org) wrote:
> On 10 Feb 2004, "Karsten M. Self" <kmself@ix.netcom.com> wrote:
> 
> >   - If the header data was forged, you've just shoved the problem one
> >     hop upstream.  Closer to the source.
> > 
> >   - If that hop is in fact the _origin_ (direct transmission from
> >     infected host), you've Done The Right Thing, and that host sucks
> >     back its spew.
> > 
> >   - If that hop is a smarthost, and it's handling delivery at receipt,
> >     it turns around and tells the originating SMTP server "no go".
> >     Which is Doing The Right Thing. 
> 
> None of these have any effect in practice.  It might be emotionally
> satisfying to have rejected the nasty virus, but it does nothing but
> cause damage to third parties.  Absolutely nothing.  I doubt if an
> SMTP reject has ever caused even one machine to be disinfected.  Do
> you know of one?

Yes.



Peace.

-- 
Karsten M. Self <kmself@ix.netcom.com>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
  Kid, this ain't your night; we're going for the price on Wilson.
  - M. Brando
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://allium.zgp.org/pipermail/linux-elitists/attachments/20040216/a1003d27/attachment.pgp 


More information about the linux-elitists mailing list