Re: [Exim] What to do with messages that seem to be virus-in…

On 6 Mar 2004 at 16:54, Alan J. Flavell wrote about

    "Re: [Exim] What to do with messages":

|...
| Some virus writers have responded by
| using the client's normal mail-submission mechanisms, i.e using the
| local mail server as a relay.

How does the virus figure out the smarthost's address? Scanning?
Name guessing? Checking for registry/config file settings of popular
MUAs like LookOut?

- Fred