To send or not to send 'virus in email' notifications?
Stephen J. Wilcox
steve at telecomplete.co.uk
Wed Aug 20 14:32:43 UTC 2003
On Wed, 20 Aug 2003, Joe Maimon wrote:
>
> Considering the amount of email traffic generated by responding to
> forged virus laden email from culprits like sobig should email virus
> scanning systems be configured to send notifications back to sender or not?
well if you dont tell them they wont know, altho with sobig the return address
is false anyhow
it would probably be best to cache the sender/virus combinations and send a
single message per 7 days
Steve
More information about the NANOG
mailing list