Message-ID: <3F709DFB.10504@ii.net>
Date: Wed, 24 Sep 2003 03:24:43 +0800
From: Wade <neroz@ii.net>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030903 Thunderbird/0.2
MIME-Version: 1.0
To: Wakko Warner <wakko@animx.eu.org>
CC: Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: [OT] Re: ATTACK TO MY SYSTEM
References: <5.2.1.1.2.20030923114213.01b36e78@pop.gmx.net> <20030923134023.GA3032@werewolf.able.es> <1064328224.1995.236.camel@spc9.esa.lanl.gov> <20030923115039.A30231@animx.eu.org>
In-Reply-To: <20030923115039.A30231@animx.eu.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1081
Lines: 29

Wakko Warner wrote:
>>First, apologies to all since this is technically offtopic, but there
>>does seem to be enough interest in this subject that I'll provide a
>>short answer here.
> 
> 
> Hate to keep it going, but...
> 
> 
>>The problem with the W32.Swen.A@mm worm/virus  became severe enough that
>>my home account on 56k dialup was almost unusable.  I've been getting
>>hundreds of these large emails per day for the past several days, and
>>the problem seems to be getting worse, not better.
> 
> 
> I'm running my own mailserver and it's hard not to accept it.  I have
> basically done checks in the from and to headers.  If it appears as a virus,
> i lockout the smtp sender.  It's not permenant.  When the virus stops, i
> unblock every one.
> 

Why not block mail with attachments which end in .pif or .exe? Who needs 
that?

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/