Re: [Exim] What do you do when you recieve a virus?

Top Page
Delete this message
Reply to this message
Author: Steve Lamb
Date:  
To: 'exim-users@exim.org'
Subject: Re: [Exim] What do you do when you recieve a virus?
Asbjorn Hoiland Aarrestad wrote:
> There are two obvious solutions to this question:
> 1. Reject the mail!
> 2. Save the mail to /dev/null


> What do you think?


     Do a google search for that topic, esp. searching the Debian-User's
mailing list.  It comes up about once a month on what to do.  Also came up
here a few weeks ago.


     Short answer: Reject.  Viruses these days are implementing SMTP so
rejecting is rejecting the virus which is most likely not going to generate a
bounce.  If it is a real MTA on the other side the bounce should go back to
the right person.  If it doesn't then the administrator of the MTA will get
some hate mail and get on the arse of the person who is spewing the virus in
the first place.  In all cases it is not your concern if the far side is
properly configured or not.



--
          Steve C. Lamb         | I'm your priest, I'm your shrink, I'm your
        PGP Key: 8B6E99C5       | main connection to the switchboard of souls.
-------------------------------+---------------------------------------------