[SpamCop-List] Re: uce@ftc.gov

[Mike Easter]

Jim Seymour wrote:
> Steven Maesslein wrote:
>> Server-side you can detect a virus *before* ultimately accepting the
>> message - i.e. before closing the SMTP session with an "OK" status.
>
> But you then have to hold the connection open while the A/V scan works
> its magic.

And why would a 'well designed' viral propagation engine care about
waiting for some 250 smtp accepted message.  I would make mine spew the
propagation as soon as I got the 'DATA' signal and leave.  Hit and run.

"We don't need no steenking 250 badges"  <GoldHat virm propagating
bandito 'federale'>


-- 
Mike Easter
kibitzer, not SC admin