On Mon, 1 Dec 2003 12:44:26 +0000, Martin Brown
wrote:


Bouncing Swen for instance seems much preferable to accepting it and at
least alerts the owner of the infected PC to their problem.

It's hardly likely. Swen does not use the address of the infected PC.
The correct action is to ignore and delete it, preferably at server
level.
--
Martin