Re: Dan Bernstein's issues about namedroppers list operation

[Bill Fenner <fenner@research.att.com>]

>I believe the case of virus propogation is really something different. What
>happens there is that someone gets infected and sends mail to every address
>they have lying around, including the addresses of the lists they are on. In
>such a case often as not the message come from their subscription address,
>and therefore gets through.

At least some variations of KLEZ, and probably more and more modern viruses,
often forge the From: header using an email address that they find somewhere
on the system.  I've seen quite a number of Windows viruses going out from
fenner@research.att.com, but I do not have a Windows MUA configured with that
address.  (The most recent one was sent to the IPNG list from a system
attached to a dialup ISP in India.)

  Bill