Virus Alerts & Loops

Meyer, Greg W greg.w.meyer at INTEL.COM
Wed Nov 15 12:21:44 EST 2000


One way to avoid cascading auto-mail meltdowns is to change the list server
so it does not replace the "Reply-To" address with the list name
address.  Thus, anyone that selects "reply" to an email will send the reply
back to the original sender.  "reply all" will send the reply to the
original sender and the list.  It seems that many companies have now
instituted anti-virus filters that automatically generate a message back to
the "Reply-To" address when they receive a virus.

Can this list setup be changed to this mode?

Thanks,
Chip


At 01:49 AM 11/15/00 +0000, you wrote:
>****** Message from InterScan E-Mail VirusWall NT ******
>
>Sent >>> RCPT TO:<Marek.Przybyszewski at DE.BOSCH.COM>
>Received <<< 550 5.7.1 Unable to relay for Marek.Przybyszewski at de.bosch.com
>
>Could not deliver mail to this user.
>
>*****************     End of message     ***************
>Received: (from uucp at localhost)
>         by gwa.fe.bosch.de (8.9.1/8.9.1) id CAA02481
>         for <Marek.Przybyszewski at DE.BOSCH.COM>; Wed, 15 Nov 2000 02:48:37
> +0100 (MET)
>Received: from mailbag.cps.intel.com( 192.102.199.72) by gwa.fe.bosch.de
>via smap (V2.1)
>         id xma002473; Wed, 15 Nov 00 02:47:33 +0100
>Received: from mailbag.intel.com (mailbag.cps.intel.com [192.102.199.72])
>         by mailbag.cps.intel.com (8.9.3/8.9.1/d: relay.m4,v 1.6
> 1998/11/24 22:10:56 iwep Exp iwep $) with ESMTP id RAA28705;
>         Tue, 14 Nov 2000 17:41:22 -0800 (PST)
>Received: from MAILBAG.INTEL.COM by MAILBAG.INTEL.COM (LISTSERV-TCP/IP release
>           1.8d) with spool id 1468 for ITU-SG16 at MAILBAG.INTEL.COM; Tue,
> 14 Nov
>           2000 17:41:21 -0800
>Received: from gwa2.fe.bosch.de (gwa2.fe.bosch.de [194.39.218.2]) by
>           mailbag.cps.intel.com (8.9.3/8.9.1/d: relay.m4,v 1.6 1998/11/24
>           22:10:56 iwep Exp iwep $) with ESMTP id RAA27895 for
>           <ITU-SG16 at mailbag.cps.intel.com>; Tue, 14 Nov 2000 17:31:19 -0800
>           (PST)
>Received: (from uucp at localhost) by gwa2.fe.bosch.de (8.10.2/8.10.2) id
>           eAF1TCw09153 for <ITU-SG16 at mailbag.cps.intel.com>; Wed, 15 Nov 2000
>           01:29:12 GMT
>X-Authentication-Warning: gwa2.fe.bosch.de: uucp set sender to
>                          <virus-protection at bosch.com> using -f
>Received: from fez8017.fe.internet.bosch.com(virus-in.fe.internet.bosch.de
>           10.4.4.17) by gwa2.fe.bosch.de via smap (V2.1) id xma008913;
> Wed, 15
>           Nov 00 01:29:05 GMT
>InterScan-Notification: yes
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>               boundary="----=_NextPart_000_974251217_B78506032.R82506026"
>Message-ID:  <200011150129.eAF1TCw09153 at gwa2.fe.bosch.de>
>Date:         Wed, 15 Nov 2000 02:20:17 +0100
>Reply-To: Mailing list for parties associated with ITU-T Study Group 16
>               <ITU-SG16 at mailbag.cps.intel.com>
>Sender: Mailing list for parties associated with ITU-T Study Group 16
>               <ITU-SG16 at mailbag.cps.intel.com>
>From: virus-protection at BOSCH.COM
>Subject:      InterScan eManager Content Management Notification! (Attachment
>               Removal)
>Comments: To: ITU-SG16 at mailbag.cps.intel.com
>To: ITU-SG16 at mailbag.cps.intel.com
>
>Content-Type: text/plain;
>         charset="iso-8859-1"
>X-MIME-Autoconverted: from 8bit to quoted-printable by
>mailbag.cps.intel.com id RAA28705
>
>******Message from InterScan E-Mail VirusWall NT******
>
>The following mail was blocked by InterScan eManager Content Management.
>
>Source mailbox: <ITU-SG16 at mailbag.cps.intel.com>
>Destination mailbox(es):
><Bjoern.Soelch at TENOVIS.COM>,<Axel.Niebuhr at TENOVIS.COM>
>Policy: Attachment Removal
>Attachment file name: Navidad.exe - application/x-msdownload
>Action: Replaced with text
>
>Attached files with executable extension have been deleted, (i.e. *.exe).
>Ausführbare Attachments wurden gelöscht (z.B. *.exe)
>
>******************* End of message *******************
>Received: (from uucp at localhost)
>         by gwa.fe.bosch.de (8.9.1/8.9.1) id CAA26146;
>         Wed, 15 Nov 2000 02:28:57 +0100 (MET)
>Received: from mailbag.cps.intel.com( 192.102.199.72) by gwa.fe.bosch.de
>via smap (V2.1)
>         id xma026048; Wed, 15 Nov 00 02:28:53 +0100
>Received: from mailbag.intel.com (mailbag.cps.intel.com [192.102.199.72])
>         by mailbag.cps.intel.com (8.9.3/8.9.1/d: relay.m4,v 1.6
> 1998/11/24 22:10:56 iwep Exp iwep $) with ESMTP id RAA27603;
>         Tue, 14 Nov 2000 17:20:47 -0800 (PST)
>Received: from MAILBAG.INTEL.COM by MAILBAG.INTEL.COM (LISTSERV-TCP/IP release
>           1.8d) with spool id 1414 for ITU-SG16 at MAILBAG.INTEL.COM; Tue,
> 14 Nov
>           2000 17:20:43 -0800
>Received: from netsys.kaist.ac.kr (netsys.kaist.ac.kr [143.248.148.90]) by
>           mailbag.cps.intel.com (8.9.3/8.9.1/d: relay.m4,v 1.6 1998/11/24
>           22:10:56 iwep Exp iwep $) with ESMTP id RAA27507; Tue, 14 Nov 2000
>           17:10:37 -0800 (PST)
>Received: from nice.etri.re.kr (nice.etri.re.kr [129.254.17.14]) by
>           netsys.kaist.ac.kr (8.9.3/8.9.3) with ESMTP id JAA21427 for
>           <pv_99 at netsys.kaist.ac.kr>; Wed, 15 Nov 2000 09:05:35 +0900
>Received: from ghlee (ghlee.etri.re.kr [129.254.72.107]) by nice.etri.re.kr
>           (8.9.3/8.9.3) with SMTP id JAA10399 for <pv_99 at netsys.kaist.ac.kr>;
>           Wed, 15 Nov 2000 09:21:33 +0900 (KST)
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>               boundary="----=_NextPart_000_002B_01C04EEB.2D813F20"
>X-Priority: 3 (Normal)
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
>X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
>Importance: Normal
>Message-ID:  <NEBBKFGEOLBEAFHGPDNAEEEBCAAA.ghlee at nice.etri.re.kr>
>Date:         Wed, 15 Nov 2000 10:02:35 +0900
>Reply-To: Mailing list for parties associated with ITU-T Study Group 16
>               <ITU-SG16 at mailbag.cps.intel.com>
>Sender: Mailing list for parties associated with ITU-T Study Group 16
>               <ITU-SG16 at mailbag.cps.intel.com>
>From: ghlee <ghlee at NICE.ETRI.RE.KR>
>Subject:      Extension of paper submission deadline of PV2001 (Nov. 30, 2000)
>Comments: To: "pv at netsys.kaist.ac.kr" <pv_99 at netsys.kaist.ac.kr>
>To: ITU-SG16 at mailbag.cps.intel.com


-------------------------------------------------------------------
Chip Sharp                       Consulting Engineering
Cisco Systems
"The best way to pick a lock is with a key."
http://www.netaid.org
-------------------------------------------------------------------

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For help on this mail list, send "HELP ITU-SG16" in a message to
listserv at mailbag.intel.com



More information about the sg16-avd mailing list