4 Jun
2004
4 Jun
'04
09:29
On Jun 4, Arjen de Korte <suse-security@de-korte.org> wrote:
Please folks, this is exactly the reason why you should NOT send bounces in reply to virusses. I'm very disappointed that SuSE is still not aware of the implications of this annoying behaviour. To summarize, only send warnings to authenticated senders otherwise you might be sending it to a spoofed sender address. To prevent spoofing, you can enable SPF for your domain (SuSE should do so as well, and also everybody else who reads this). See http://spf.pobox.com for more information.
Basically, SPF means that you insert a TXT record into your DNS zone that specifies which IP-addresses and MX servers are allowed to send mail with a FROM that contains your domain name. Markus