Re: [Mimedefang] Handling different viruses: discard message vs. drop attachment

2004-01-28 Thread Bill Maidment
Kelson Vibber wrote: OK, I think most people here would agree that just about all modern viruses generate their own messages rather than piggybacking on existing mail, so for anything like Klez, Sobig, and Mydoom, the obvious choice is to just discard the entire message (possibly placing it in

Re: [Mimedefang] Handling different viruses: discard message vs. drop attachment

2004-01-28 Thread David F. Skoll
On Wed, 28 Jan 2004, Kelson Vibber wrote: > I know I'm not the only one keeps a list of known mass-mailers in order to > decide whether to discard the attachment or the whole message. But I have > to keep updating that list, and I have to wonder: is it worth making this > distinction anymore? No

Re: [Mimedefang] Handling different viruses: discard message vs. drop attachment

2004-01-28 Thread Lucas Albers
Kelson Vibber said: > But once upon a time there were viruses that attached themselves to legit > messages (remember happy99?), and the best choice there is to remove the > infected attachment and pass the rest of the message along. > > I know I'm not the only one keeps a list of known mass-maile

[Mimedefang] Handling different viruses: discard message vs. drop attachment

2004-01-28 Thread Kelson Vibber
OK, I think most people here would agree that just about all modern viruses generate their own messages rather than piggybacking on existing mail, so for anything like Klez, Sobig, and Mydoom, the obvious choice is to just discard the entire message (possibly placing it in quarantine). No bounc