Re: [anti-spam-wg@localhost] Antivirus bounces

[Markus Stumpf <]

On Mon, May 10, 2004 at 06:55:25PM +0100, Dave Wilson wrote:
> If the virus is one that forges, the mail server must not send a bounce, as 
> the Return-Path: cannot be trusted. If the virus does not forge, the mail 
> server must send a bounce, in accordance with RFC2821.

In any case it is more the problem that most of those "bounces" do not
contain valuable information.

They all only say "Virus XYZ deleted".
Would they contain the header of the original email they would of
course be a valuable information, as I could see e.g. the IP of the clueless
user that is abusing my email address and name to send out viruses.

If this happens in the commercial environment were a direct competitor sends
out those emails, it is even more interesting, as they are giving the
other company a bad name and have obviously not taken reasonable
precautions. This may become an interesting law suit and as soon as
also the senders and not only the writers of viruses are liable for the
damage they cause it is be an important step in the fight against viruses.

	\Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
"The security, stability and reliability of a computer system is reciprocally
 proportional to the amount of vacuity between the ears of the admin"