[clug] Interesting MyDoom bounce

[Marek Samoc]

On Fri, 30 Jan 2004, Tim Potter wrote:

TP> On Fri, Jan 30, 2004 at 02:11:53PM +1100, Brett Worth wrote:
TP>
TP> > I just saw this in our logs:
TP> >
TP> >  ----- The following addresses had permanent fatal errors -----
TP> > <user at altair.com>
TP> > 	(reason: 550 Error: Microsoft Windows(tm) attachments not accepted here. Please remove them and resend.)
TP> >
TP> > An excellent approach... :-)
TP>
TP> Except for the fact that the sender address is forged and the unlucky
TP> sender now gets a bounce message for a message they didn't send.
TP>
TP> A better approach is to just discard virus emails.
TP>
TP>
TP> Tim.
TP>

Yes, but it is not up to the receiving end to decide whether a message is
to be discarded. The receiving end of an SMTP transaction just provides a
5xx error. It is up to the sending machine to bounce the message back or
to drop it on the floor.