January 19, 2004

Important safety tip for mail admins

If you're filtering outgoing mail for viruses, don't just strip off the virus payload and let the message go on its merry way. Either let it through untouched so my virus filters can catch it and kill it, or kill the damn thing dead. (You killing it is my preference, honestly) Stripping the payload just means I get hammered with bogus messages that takes more effort to deal with.

This seems to be a bigger problem with the latest round of viruses (BAGLE this time) than in the past. At least the annoying flood of "The mail you didn't send because someone else's infected machine spoofed the from was infected!" bounces and warnings have slowed down. I suppose this is an indication that the 'net, collectively does learn.

Heck, at this rate we may discover fire in a few hundred years...

Posted by Dan at January 19, 2004 10:24 AM | TrackBack (0)
Comments

any opinion about spamarrest.com and challenge/handshake for mail.. It seems to work so nicely (no - I don't work for spamarrest, but I am a user).

Posted by: chris at March 18, 2004 07:54 AM

Challenge/response systems suck. They're responsible for far too much of the crap mail on the net, since they spew out their garbage for all the bogus mail that comes in because of all these mass-mailing worms spoofing people's e-mail addresses. Then you're making legitimate people who're sending you mail jump through hoops to actually mail you, and a lot of people (including me) won't. Finally it's a good way to make sure nobody send you mail anyway, since (because of the mass-mailing worm floods) most of the responses from challenge/response systems get caught automatically by spam filters and discarded so even if someone did want to get in touch with you, odds are they couldn't.

Posted by: Dan at March 18, 2004 09:43 AM

I like the challenge/response - simply because it leads to 0 spam.

Posted by: greg at May 25, 2004 07:21 PM