Subject: Re: Please scan your computers for viruses
From: AthlonRob
Date: 26/09/2003, 23:21
Newsgroups: alt.sci.seti

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Fri, 26 Sep 2003 22:53:01 +0100, Martin <ml_news@ddnospamddml1dd.co.uk.dd> wrote:

And you can be sure that your software is clever enough to know what is 
or is not forged or filched?

All by itself?  No.  I tell it.  Any virus matching the regex pattern I 
set up in the config file doesn't generate reject notices.  It's as 
simple as that.

If you really want to dig in to how this software works, I suggest you 
do so - it's all free an opensource (GPL'd, I think) - google for 
amavisd-new.  It's powerful stuff, tied in with SpamAssassin.

Manually sending a mail to warn someone known to you to warn them of 
whatever problem is fine, good, commendable and for all good people 
expected.

Sending what is effectively (miss-directed do-gooder) spam to unknown 
strangers is silly and likely an example of your being duped. It adds to 
an exponential growth of the problem symptoms.

Oh, I see.  They can tell the difference between email I type and email 
my server automatically sends.

Since I (the postmaster) am notified whenever my server is sent a virus, 
I can quite easily (and I do) check to see if the virus forges the FROM 
and Return-Path headers.  If it does, I add it to the blacklist so no 
more notifications are sent out.  Admittedly, the first one does go 
out, but I think it is a small price to pay.

Has anybody figured out yet, for sure, if the Return-Path header is 
forged on Swen-generated emails?

-- Rob | If not safe, Email and Jabber: | one can never be free. athlonrob at axpr dot net | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/dLwChm6KEoOOAe0RApB3AKD0FpNUjdZoliQOtrKGOk/2v+IYZQCgvO9T CtzoZnOBXs2fmrdmj0hAN2M= =wzaN -----END PGP SIGNATURE-----