Just a note for helping trap some of the new viruses. I do not know which virus is the problem because our gateway is successfull in deleteing the attachment before doing the virus scan. But whichever one it is uses the domain name of the recipient in the HELO string.
For example if the mail was sent to [EMAIL PROTECTED] the HELO string would be example.com. Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
