RE: [cobalt-users] Email spoofing

["Dan Kriwitsky" <list3@xxxxxxxxxxxxxxxxxxxx>]

Someone in the news.admin.net-abuse.email newsgroup posted an excellent
explanation as to why such notices should not be sent:

"Larry M. Smith" wrote in message
news:405fcda5$0$31395$18feec2b@xxxxxxxxxxxxxxxxx

"If the mail message is rejected because it contains a known virus, then

the anti-virus system, being a pattern matcher, knows what virus the 
message contains and passes this information back to the mail system. 
The information passed back to the mail system contains the name of the 
virus.  MassMailing viruses include the strings WORM.I.*, *.mm, *@mm, or

some other similar sting that identifies it as a type that wasn't sent 
by the a living person.

Any virus message that is rejected and we know that in all likelihood it

was injected into email by a machine, and not the user, should be 
treated as if the sender's envelope had been set to null and simply drop

the response to it on the floor."
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.