Re: Handling flood of returned e-mail messages due to spam with forged sender address

[Gary Flynn <flynngn () JMU EDU>]

Dick Jacobson wrote:

> On Mon, 16 Aug 2004, Scott Weeks wrote:
>
> > Because that's the way the virus was written.  It's not retaliatory if
> > it's the virus I'm describing.
>
> And when was the last time you saw a real spammer use their own real
> address on the From: line ?
>
> As postmaster I was getting several thousand of these daily - a couple
> years ago.  We used filters to divert the mail before it hit my inbox.  Of
> course I need to clean the log files frequently to avoid quota problems.
> ;-)
>
> This is the reason I insisted we not try to return infected mail to the
> source (or notify them).  The a/v vendors have not developed the code to
> be able rip apart the headers to determine the true origin.

Just to clarify the situation, the messages are made up of a variety
of spam, not messages generated by viruses trying to spread
themselves.

--
Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.