To send or not to send 'virus in email' notifications?

Stephen J. Wilcox steve at telecomplete.co.uk
Wed Aug 20 14:32:43 UTC 2003



On Wed, 20 Aug 2003, Joe Maimon wrote:

> 
> Considering the amount of email traffic generated by responding to 
> forged  virus laden email from culprits like sobig should email virus 
> scanning systems be configured to send notifications back to sender or not?

well if you dont tell them they wont know, altho with sobig the return address 
is false anyhow

it would probably be best to cache the sender/virus combinations and send a 
single message per 7 days 

Steve




More information about the NANOG mailing list