from my testing the worm will continue emailing itself to everyone else - one bad email address will not stop a distribution list. in fact, Outlook 2000 (SR-1) will not allow you to enter an email address of "WormAlert" - it expects the format [EMAIL PROTECTED]
as a test, i created an email with the following recipient in the TO line: [EMAIL PROTECTED], followed by several (5) valid, working email addresses. All 5 valid emails were received - I got a message from the first one bouncing: ----- Transcript of session follows ----- 550 5.1.2 <[EMAIL PROTECTED]>... Host unknown (Name server: localhost.local: host not found) This method does not prevent worm spread. -----Original Message----- From: leon [mailto:[EMAIL PROTECTED]] Sent: Monday, October 22, 2001 4:52 PM To: 'Aaron Laudi'; 'security-basics' Subject: RE: Good Idea? Why does the worm stop after it cant get past the first contact? Wont it just continue???? That is my question to the question. Regards, Leon
