Len, I Do
Can I -the list- get the info of how to apply it ?
Andres
> -----Mensaje original-----
> De: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]En nombre de Len Conrad
> Enviado el: Viernes, 20 de Julio de 2001 15:44
> Para: [EMAIL PROTECTED]
> Asunto: Re: [IMail Forum] How to block the new worm? sircam.exe
>
>
>
> > Hi, who have an optimized rule that block sircam.exe and your
> > variants?
>
> These RegEx are working in IMGate (I wonder if Ipswitch�s AV will
> catch it?):
>
> /H-o-l-a c-o-m-o e-s-t-a-s/ REJECT
> /N-o-s v-e-m-o-s p-r-o-nt-o/ REJECT
> /H-i\! H-o-w a-r-e y-o-u/ REJECT
> /S-e-e y-o-u l-a-t-er\. T-h-a-n-k-s/ REJECT
>
> You don�t have IMGate? :))))
>
> Len
>
> http://MenAndMice.com/DNS-training
> http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
> http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
