To send or not to send 'virus in email' notifications?

Wed Aug 20 17:13:24 UTC 2003

http://support.microsoft.com/default.aspx?scid=kb;[LN];823980

Cheers,
Cade Kelly
System/Network Administrator
ECONnergy Co. Inc
Spring Valley, NY

-----Original Message-----
From: Wesley Vaux [mailto:Wesley.Vaux at globalknowledge.com]
Sent: Wednesday, August 20, 2003 11:58 AM
To: 'Stephen J. Wilcox'; Joe Maimon
Cc: nanog at merit.edu
Subject: RE: To send or not to send 'virus in email' notifications?

At 10:30:43 my systems rebooted after installing hotfix "Windows 2000 Hotfix
KB823980 was installed" and machines rebooted.  Any ideas on how to remove
this or what it may be?

		Wes Vaux, CCNA, CCDA
		Network Security Engineer,
		9000 Regency Pkwy
		Ste 500
		Cary, NC 27511
		t 919.463.6782
		f 919.463.1290

		Global Knowledge
		Experts Teaching Experts
		http://www.globalknowledge.com

-----Original Message-----
From: Stephen J. Wilcox [mailto:steve at telecomplete.co.uk]
Sent: Wednesday, August 20, 2003 10:33 AM
To: Joe Maimon
Cc: nanog at merit.edu
Subject: Re: To send or not to send 'virus in email' notifications?

On Wed, 20 Aug 2003, Joe Maimon wrote:

> 
> Considering the amount of email traffic generated by responding to 
> forged  virus laden email from culprits like sobig should email virus 
> scanning systems be configured to send notifications back to sender or
not?

well if you dont tell them they wont know, altho with sobig the return
address 
is false anyhow

it would probably be best to cache the sender/virus combinations and send a 
single message per 7 days 

Steve