Re: [Exim] Blocking sobig.f

Top Page
Delete this message
Reply to this message
Author: Russell King
Date:  
To: Shane Wegner
CC: exim-users
Subject: Re: [Exim] Blocking sobig.f
On Tue, Aug 19, 2003 at 01:05:57PM -0700, Shane Wegner wrote:
> Have any acls for exim4 been written to block the latest
> sobig.f virus released today. We've received over 300 of
> them and would like to block at smtp level if possible.


May I suggest that rather than causing bounces that people just discard
these malicious emails?

The traffic which hits my mail server is about 40% malicious bounces
caused by various virii and spam using random usernames in my domains.
Normally these don't hit a known address.

However, as of this morning, malicious bounces are hitting my real
addresses, some of them from exim servers configured to bounce mails
containing bad attachments.

Sometimes bouncing messages causes _more_ problems than simply
discarding them.

--
Russell King (rmk@???)                The developer of ARM Linux
             http://www.arm.linux.org.uk/personal/aboutme.html