From: *Hobbit* (hobbitavian.org)
Date: Tue Sep 02 2003 - 04:17:39 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> > X-MailScanner: Found to be clean
>Sobig.F at work here, discard or what ever your policy prefers.

   this is the default header added by mailscanner. Don't block mail
   based on presence of this header.

Disagree. It's too late. Many people are using that since sobig.f
conveniently stuck it in, and it was otherwise not common enough to
justify *not* utilizing as a convenient tag to drop sobig traffic.
It is also useful in body_checks to dump the numerous joe-job bounces.

A worm has ruined that header/string for all time, just like other
ones ruined "supportmicrosoft.com" and other items that have likely
earned a permanent place in filter sets worldwide and are not about
to be backed off now. The Mailscanner people should probably adapt
and change their headers, or better just eliminate them entirely.

_H*

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]