> >Does anyone have, or could write an add on script, for mailscanner which
> >would add email addresses found to be sending viruses to the
> deny list, thus
> >enabling it to be viewed / edited in the GUI?
> >
> >I'm doing it quite sucessfully manually right now, but it would
> be great to
> >automate it.
>
> and which bogus addresses are you adding
Mainly the ones culled from users address books who are infected with the
SwenA virus, where the spoofed sending address is used a minimum of twice,
though it then seems to repeat a few days later and the same addresses will
then reappear. If they are banned then the incoming virus and payload is
rejected without having to waste box resources and bandwidth upon it.
It works, you can see them getting turned away by tailling maillog for a
while.
So far none of the addresses tally with anyone my users know or want to
communicate with.