Full Disclosure mailing list archives

RE: antivirus s/w


From: "Bryan K. Watson" <bwatson () nettracers com>
Date: Tue, 27 Jan 2004 11:47:01 -0800


AV response email is PART OF THE PROBLEM now, not PART OF THE SOLUTION.
Especially with virii spoofing the "From" field now. It just ends up with
somebody at random getting
the response, which is likely to cause more confusion.

 The problem is not just antivirus software...the SMTP RFC states that mail
servers must be polite as well....so all the sysadmins have to deal with
purging all those double bounces from faked headers and invalid
destinations. 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: