----- Original Message -----
From: "Goran Bajramovic" <[log in to unmask]>
> Actually this will work in some cases and is not a hoax. Depending on what
> client you use and how you have it set up, an invalid address will stop
the
> mailing process and alert of the attempt to send an email to invalid
> address.
> Only detriment is that trick may give users invalid sense of security and
> worms can get around it by randomly selecting emails from the address
book.
> ________________________________________________________
> Goran Bajramovic
> FREE DOMAIN NAMES - http://www.RealEffects.Com
> ________________________________________________________
>
Didnt you read http://antivirus.about.com/library/weekly/aa082801b.htm ?
If you dont understand.
1) Modern worms select recipents randomly.
2) Most of them uses own SMTP engine wich means that they send mail
to ISP server without mail program - so no error messages.
Additionally it takes only one line of code check is mail address valid.
Creating contact with valid address but unexistent host You get replay
from server when it is to late, worm is already sent.
If worm has own engine only few lines to check is mail deliverable.
So this trick stops only very primitive worms and notifies you only slightly
less primitive ones.
Toomas
PCSOFT's List Owner's:
Bob Wright<[log in to unmask]>
Drew Dunn<[log in to unmask]>
|