> > > Hi, > > > > I got a suspicious mail this morning which looked very like a virus, > > and I'm now receiving reports from a neighbouring institution that > > they are getting hit with the same thing. It is rumored to be a new > > variant of Bagle, though noting I have picks it up yet. > >
> > The neighbouring institution had their domain in the mail, instead of > > mine, so the virus appears to be attempting a bit of socian > > engineering. Also, the from address was forged to be from > > MAILER-DAEMON at my domain. > > If you are running your own incoming mailserver, greylisting should prevent these from getting into your system, as the sender address varies each time it tries to send the email. I've had one IP try five different sender addresses, before giving up. Matt ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
