RE: WORM_MIMAIL.A Anyone have any info on what this does yet?

["Christopher X. Candreva" <[EMAIL PROTECTED]>]

On Fri, 1 Aug 2003, Schmehl, Paul L wrote:

> <http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
> .html>
>
> We're blocking message.zip at the gateway.

It seems to use admin@(recipientdomain.com) as the envelope from address, so
if you don't use admin@ as a valid sending account, blocking mail from
[EMAIL PROTECTED]  has put a stop to the bulk comming in.

It't wont stop everything, such as any forwarded from outside accounts, but
it will decrease the load on your virus scanner.

-Chris

==========================================================
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/

---------------------------------------------------------------------------
----------------------------------------------------------------------------