[Dshield] Virus emails
doug at clickdoug.com
Wed Jan 28 22:21:01 GMT 2004
I am using this as a temporary fix as each infected computer appears to be
sending about 10-20 copies per hour to the server.
Stop spam on your domain, Anti-spam solutions
For hosting solutions http://www.clickdoug.com
Aspire to Inspire before you Retire or Expire!
----- Original Message -----
From: "Josh Tolley" <josh at raintreeinc.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Wednesday, January 28, 2004 10:35 AM
Subject: Re: [Dshield] Virus emails
: Be careful firewalling by IP to stop these viruses. Since the virus
: emails to people in your Outlook address book, the computers that are
: sending these to you more than likely are from people you know (that is,
: people that have you in their address book). Which is one of the things
: that makes that nastly little attachment seem a little more harmless
: despite years of "don't open attachments on pain of surgical removal of
: clicking finger" warnings, because occasionally it looks like someone
: you know is sending you stuff.
: Anyway, I know most of the infected emails I was getting were from an
: off-site coworker who although happy that I helped her clean her
: computer up would have been particularly peeved if she couldn't send
: email to those of us in the office.
: Doug White wrote:
: > I am firewalling by IP number - This would be too much work for a very
: > traffic server, I think, but with the relatively few Source IP numbers I am
: > getting, I just add them to the firewall as they start showing up. This is
: > since each infected machine pumps repeated messages.
: > This has not stopped all of them, but it is stopping a lot of them for me.
: > Your mileage may vary.
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
More information about the list