* This is the modus mailing list *

Hi Jon,
I would think that the fact Norman.com does not even mention this worm
would strongly indicate we are not protected. I created a sieve script to
try and block this new worm. Please improve it if necessary and repost it
here since my sieve skills are poor at best.

Here's Norton's info about it...
http://www.sarc.com/avcenter/venc/data/[EMAIL PROTECTED]



# To block the Beagle worm..... (it should block any messages that
# have the subject Hi and that also have an attachment of any sort.
#

if allof  (
    header :contains "subject" "Hi",
    attachment :matches "*.*"
)    { discard; stop; }

Thanks,
Lewis



----- Original Message ----- 
From: "Jon Benson" <[EMAIL PROTECTED]>
To: "Modus (E-mail)" <[EMAIL PROTECTED]>
Sent: Sunday, January 18, 2004 11:42 PM
Subject: [Modus] Checking virus defs?


* This is the modus mailing list *

Hi folks,

Would anyone be able to tell me how to check what virus defs I have
compared to the Norman website?

The update links off to
http://www.norman.com/virus_info/virus_info_new.shtml but the number given
there (currently 0114) doesn't seem to correspond to anything I can find
in Modus.

Basically I'd like to know if the server is currently detecting the
following:
http://vil.nai.com/vil/content/v_100965.htm


Thanks,

Jon Benson
Mail/DNS/Linux Administrator
OzHosting.com

**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to