Skip Navigational Links
LISTSERV email list manager
LISTSERV - COMMUNITY.EMAILOGY.COM
LISTSERV Menu
Log In
Log In
LISTSERV 17.5 Help - LSTSRV-L Archives
LISTSERV Archives
LISTSERV Archives
Search Archives
Search Archives
Register
Register
Log In
Log In

LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Menu
LISTSERV Archives LISTSERV Archives
LSTSRV-L Home LSTSRV-L Home

Log In Log In
Register Register

Subscribe or Unsubscribe Subscribe or Unsubscribe

Search Archives Search Archives
Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: Viruses sent to Listserv
From:
Patrick von der Hagen <[log in to unmask]>
Reply To:
LISTSERV site administrators' forum <[log in to unmask]>
Date:
Mon, 18 Jul 2005 17:33:55 +0200
Content-Type:
text/plain
Parts/Attachments:
text/plain (34 lines)
Darren Evans-Young wrote:
> Is this possible? And if so, how to prevent it?
>
> Listserv receives a posting for a list containing a virus with a forged
> MAIL FROM: address. Listserv sends the rejected message back to the forged
> address because it isn't subscribed, thereby spreading the virus to a new
> email address.
There are two different situations.
A: Receiving a virus through an SMTP-server. Then it is IMHO the duty of
the SMTP-Server to stop viruses sent by e-mail and not to pass them to
Listserv. Having Listserv perform virus-scanning if your SMTP-Server
could have done it is just plainly broken.
If possible: never accept an e-mail, scan it and then reject it by
sending a bounce-message to the sender. That way you'd spread the virus
to an innocent thrid party, since the sender-address is usually forged.
Either drop that e-mail or (better) have it scanned during transmission
and reject it if you detect a virus. Thus it is the other party's
responsibility to create a bounce and a virus-software, trying to
deliver an e-mail to you just won't do that, thus not hurting any
third-party.

B: Receiving a virus through Listserv-distribute-protocol. Quite ugly,
but there is always a moment where Listserv has to pass the message to
an SMTP-Server, and since your SMTP-Server should scan for viruses
anyway, even that problem is solved.

BTW, I had a look at spam-scanning, as it is implemented by listserv.
The spam-exit seems to be quite horrible and if virus-scanning is
implemented like spam-scanning, it should be avoided if possible.

--
CU,
    Patrick.

ATOM RSS1 RSS2

COMMUNITY.EMAILOGY.COM CataList Email List Search Powered by LISTSERV