[Dshield] Mydoom, Navarg, Sco what ever

Tony Earnshaw tonye at billy.demon.nl
Sun Feb 1 21:29:13 GMT 2004


søn, 01.02.2004 kl. 16.11 skrev JD:

> We are having a problem designing signatures for it,  because there are
> so many variations of it,  and no one seems to catch all instances of 
> the
> virus.  Has anyone else experienced this problem?

No. My Postfix/amavisd-new server would accept *any* .exe, .pif, .bat
etc (there's a list of idiot DOS extensions a yard long), devour them
and silently shit them down /dev/null.

*WHY* are you accepting Microsoft trash in incoming mail? Haven't you
read what the virus-company leaches advise?

--Tonni

-- 

mail: billy - at - billy.demon.nl
http://www.billy.demon.nl




More information about the list mailing list