MyDoom spoofs its sender addresses at least some of the time.
It also sends through its own SMTP engine, rather than ISPs' servers.
(source:
http://www.sarc.com/avcenter/venc/data/w32(_dot_)novarg(_dot_)a(_at_)mm(_dot_)html)
Both of these make it exactly the sort of virus against which SPF would
be most effective.
We can't knock them all out but we'd have slowed this one right down.
'Nuff said.
Wechsler
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
Wiki:
http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/HomePage
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡