[60937] in North American Network Operators' Group
Re: To send or not to send 'virus in email' notifications?
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Wed Aug 20 10:39:05 2003
Date: Wed, 20 Aug 2003 15:32:43 +0100 (BST)
From: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
To: Joe Maimon <jmaimon@ttec.com>
Cc: nanog@merit.edu
In-Reply-To: <3F4384D8.7060400@ttec.com>
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 20 Aug 2003, Joe Maimon wrote:
>
> Considering the amount of email traffic generated by responding to
> forged virus laden email from culprits like sobig should email virus
> scanning systems be configured to send notifications back to sender or not?
well if you dont tell them they wont know, altho with sobig the return address
is false anyhow
it would probably be best to cache the sender/virus combinations and send a
single message per 7 days
Steve
