I have informed the fine folks at MailScanner of this. For those of you supporting MailScanner on a Linux box, MailScanner has a couple of options in the config file for the headers:
Append the new data to the existing header Add a new header Replace the existing header I have set mine to replace the existing headers, this *should* remove any forged X-MailScanner headers Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg Citizens Internet Services http://www.wpa.net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, August 19, 2003 11:11 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Sobig - Easy to Detect? Hi, Is it just me, or is Sobig.F always adding the fake header: X-MailScanner: Found to be clean Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.