Re: Virus and al.

From: Pierre Abbat (phma@webjockey.net)
Date: Thu Aug 21 2003 - 07:06:54 EDT

  • Next message: Pierre Abbat: "Re: Spanish string update"

    On Wednesday 20 August 2003 03:19, Hubert Figuiere wrote:
    > The problem is not that simple. Filtering the whole content use a LOT of
    > CPU given the traffic we have.
    >
    > Anyway I have strengthened the filters on mailing list input.
    >
    > All: do yourself a favor, stop using Outlook (Express). This crap is
    > propagated, once again, by Outlook. (the From: is spoofed)

    It's not just the list. I got a bounce of a message sent to Rhoslyn Prys sent
    from 80.199.12.192 in csirt.dk or tele.dk. Looking through the copies of the
    worm that ended up in my spamtrap, I see From: addresses of abiword-dev, Alan
    Horkan, Caolan McNamara, abiword_bugs, Gilles Saint-Denis, Alper Shullgum,
    Andy, and Dan. They are coming from the Philippines, Denmark, ATTBI, and
    elsewhere - one of the messages claiming to be from Caolan is actually from
    Finland. They are coming about one every two minutes.

    phma 

    -- 
.i toljundi do .ibabo mi'afra tu'a do
.ibabo damba do .ibabo do jinga
.icu'u la ma'atman.

    This archive was generated by hypermail 2.1.4 : Thu Aug 21 2003 - 07:20:15 EDT