* This is the modus mailing list *
Everything is ok here - except that I had to write a Sieve script to protect
us from all the foolish virus alerts from admins who make MyDoom even worse
by giving false alarms to forged sender addresses stolen from adddress
books:
if allof(
body :text :contains [ "virus" ],
body :text :contains
[
"alert",
"attachment",
".bat",
".com",
".cmd",
".exe",
".hta",
".lnk",
".scr",
".shs",
".vb ",
".zip"
]
) { discard; stop; }
I had LOTS of customers calls who received all kinds of dumb warnings, some
automated sender responses even told our people: "your compunter is
infected, contact your admin!".
I hate this kind of crap, especially when a it comes from infected networks
(as you see when you check the headers). This is almost worse than spam...
But with the script from above all alerting crap is dumped.
It seems easier to protect from MyDoom than from stupid email server
configurations...
Kai Fiebach
Musikhochschule Luebeck, Germany
http://www.mh-luebeck.de
-----Original Message-----
From: Suneel Jhangiani [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 29, 2004 1:56 PM
To: [EMAIL PROTECTED]
Subject: [Modus] Ping
I haven't seen an email on the list for a full 8 hours now, just wondering
if you guys are all hurting from the MyDoom attack?
Regards,
Suneel Jhangiani
Inter-Computer Technology Ltd.
**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.
