On Sat, Oct 19, 2002 at 10:38:08AM +0100, Dr Andrew C Aitchison wrote:
> Hmm. Rejecting viruses at SMTP time instead of accepting them and then
> bouncing them does have this wrinkle.
>
> Remote senders of viruses aren't a problem, since their messages
> will have come through their MTA, which can generate a sensible
> rejection message.
Actually it is a problem you don't want to bounce the message yourself
if you can avoid it. The reason is that when the envelope from has been
faked, you don't want to accept the mail and then bounce it back to the
wrong person if you can avoid it at all.
Of course, at the same time, you can't delay the SMTP session that much
either, so you if you do virus checking at SMTP time, you have to do it
fast (ideally less than 30 secs)
Marc
--
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
.... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/ | Finger marc_f@??? for PGP key
