august, 20, 2003 archives
viruses that spoof the sender address
the register hints at the chaos caused by auto-responding to viruses that spoof the sender, and jupitermedia got hit especially hard because it also uses admin@internet.com.
sobig's built-in smtp server appears to get tripped up by the check_earlytalker plugin for qpsmtpd.
to deal with some of the worm-induced bounces hitting lists.mysql.com, i implemented a simple check_badbounceto plugin to identify addresses that should not receive bounces because they don't send mail. it seems to have been fairly effective.
