[SpamCop-List] Re: Deputies: "This message looks like a bounce, will not report."

[Mike Easter]

Fred K wrote:
> "Mike Easter"

>> Second, these days *all* virus notifications are misdirected,
>> because no current viruses are being propagated with the infected
>> user's addy in the From.  That is, if you get a virus notification,
>> you can be assured that it wasn't you who sent the virus you are
>> being notified about.
>
> Mike
> But the originating IP is still the source of the virm and not the
> From, right?

Correct.

The sequence is now....

 - a foolish user/IP gets infected
 - the infected becomes a propagator and spews virms with your From addy
 - a foolish server receives the propagation and generates a newmail to
you notifying you of the propagation
 - now with the #14 change, you report the foolish server source of the
notify

or

 - a foolish user/IP gets infected
 - the infected becomes a propagator and spews virms at you
 - now with the #14 change, you report the foolish user/IP [not the
From]


-- 
Mike Easter
kibitzer, not SC admin