* This is the modus mailing list * I agree by send notification we are compounding the issue. For Example our server receives an email containing MY DOOM. That is a single message but if we send out Sender/Recipient notifications it now increase to three emails total. Not to mention postmaster notifications. So to recap one nasty MY DOOM email spawns 2 - 3 additional emails, we would be helping the virus in it DOS attack by increasing the mail load but 50% - 75%.
Just something to think about. Charles -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of postmaster Sent: Thursday, January 29, 2004 8:21 AM To: '[EMAIL PROTECTED]' Subject: [Modus] Pong * This is the modus mailing list * Everything is ok here - except that I had to write a Sieve script to protect us from all the foolish virus alerts from admins who make MyDoom even worse by giving false alarms to forged sender addresses stolen from adddress books: if allof( body :text :contains [ "virus" ], body :text :contains [ "alert", "attachment", ".bat", ".com", ".cmd", ".exe", ".hta", ".lnk", ".scr", ".shs", ".vb ", ".zip" ] ) { discard; stop; } I had LOTS of customers calls who received all kinds of dumb warnings, some automated sender responses even told our people: "your compunter is infected, contact your admin!". I hate this kind of crap, especially when a it comes from infected networks (as you see when you check the headers). This is almost worse than spam... But with the script from above all alerting crap is dumped. It seems easier to protect from MyDoom than from stupid email server configurations... Kai Fiebach Musikhochschule Luebeck, Germany http://www.mh-luebeck.de -----Original Message----- From: Suneel Jhangiani [mailto:[EMAIL PROTECTED] Sent: Thursday, January 29, 2004 1:56 PM To: [EMAIL PROTECTED] Subject: [Modus] Ping I haven't seen an email on the list for a full 8 hours now, just wondering if you guys are all hurting from the MyDoom attack? Regards, Suneel Jhangiani Inter-Computer Technology Ltd. ** To unsubscribe, send an Email to: [EMAIL PROTECTED] with the word "UNSUBSCRIBE" in the body or subject line. ** To unsubscribe, send an Email to: [EMAIL PROTECTED] with the word "UNSUBSCRIBE" in the body or subject line.
