RE: [Declude.Virus] W32/Magistr virus

2001-10-26 Thread R. Scott Perry


I have gotten many notifications as postmaster with Snow White and Magistr
and I know that at least some of our users have gotten notifications.  Is it
possible that only certain variants of these viruses do this?

You will get the postmaster notifications.

The problem is that these viruses alter the return address (for example, 
Snow White says it comes from [EMAIL PROTECTED]).  So Declude can send 
you the postmaster notification without a problem (which goes to 
postmaster@ the recipient's domain, which is going to be valid), but when 
it sends the notification to [EMAIL PROTECTED], that will bounce, because 
it is not a valid address.
 -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.Virus] W32/Magistr virus

2001-10-26 Thread Ed Chabot

Scott,
Thanks for the clarification.

Ed Chabot
The Marlin Firearms Company
100 Kenna Drive
North Haven, CT 06473
(203)985-3254

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, October 26, 2001 1:54 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] W32/Magistr virus



I have gotten many notifications as postmaster with Snow White and Magistr
and I know that at least some of our users have gotten notifications.  Is
it
possible that only certain variants of these viruses do this?

You will get the postmaster notifications.

The problem is that these viruses alter the return address (for example,
Snow White says it comes from [EMAIL PROTECTED]).  So Declude can send
you the postmaster notification without a problem (which goes to
postmaster@ the recipient's domain, which is going to be valid), but when
it sends the notification to [EMAIL PROTECTED], that will bounce, because
it is not a valid address.
 -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .