We use a distribution list for virus alerts. Whomever is working an issue simply replies to the alert email and that informs the DL members that it is being looked at. This requires SEP to send from the SMTP address assigned to the DL. However the SEPM emails are coming from

SYSTEM@ <server name>.com

If someone replies to these emails their email will go to the Internet to whomever has registered my server name with a .com extension. For why this is a really bad idea, please see http://consumerist.com/371600/the-man-who-owns-donotreplycom-knows-all-the-secrets-of-the-world 

Admins were sending out automated emails from addresses like automated@donotreply.com actually expecting the recipients to understand that "donotreply.com" meant "do not reply" but it didn't work so well. The owner of donotreply.com was publishing sanitized copies of these emails on his web site.

donotreply.com points to a ad site now, but it's still a valid concern.

Thanks,

Ray