Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 May 2004 22:12:56 -0500
From:      Dan Nelson <dnelson@allantgroup.com>
To:        Bob Perry <rperry4@earthlink.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Return Delivery of Mail I've never Sent
Message-ID:  <20040513031256.GC81440@dan.emsphone.com>
In-Reply-To: <20040513030052.GA706@sphinx.alpha.domain>
References:  <20040513030052.GA706@sphinx.alpha.domain>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (May 12), Bob Perry said:
> Just setup mutt and I've begun to notice mail return to me indicating
> that it did not pass the server content filter, etc.  The last one
> stated that a virus was found, file name disco.zip, virus name
> W32/Netsky.c@MM!zip and apprarently was found by McAfee Scanning
> Engine (4359/4.3.20).  What makes it worse is that the recipient is
> not recognizable.
> 
> I understand that my system can be used as a mail relay and would
> like to know how to combat this.  Can anyone point me in the right
> direction so that I can quickly resolve this issue?

Most likely the original email never touched your system.  A virus that
selects random sender and recipients from the infected machine's
addressbook sent a message to another system with a misconfigured virus
scanner that attempted to notify the sender that they're infected (even
though viruses have been forging the sender address for years).

-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040513031256.GC81440>