Re: [Exim] Blocking sobig.f

Top Page
Delete this message
Reply to this message
Author: David Woodhouse
Date:  
To: Alan J. Flavell
CC: Exim users list
Subject: Re: [Exim] Blocking sobig.f
On Wed, 2003-08-20 at 00:25, Alan J. Flavell wrote:

> Now, what do we do about these hundreds of stupid 'you sent us a
> virus' non-delivery reports. They seem to come in all kinds of shapes
> and sizes, from all kinds of crazy envelope-sender addresses in
> addition to the regulation <>


If they're sending bounces without an empty SMTP reverse-path, then
they're in violation of RFC2821 and common sense, and they're just a
mail loop waiting to happen. Report this to them and to the abuse
contact at their network provider.

I generally point out that further instances of this abuse will be
considered a deliberate denial-of-service attack and will be treated
accordingly.

It's a shame rfc-ignorant.org doesn't have a list for this. There are
quite a few vacation messages which behave similarly brokenly too.

--
dwmw2