bhavesh
On Feb 12, 2004, at 9:55 AM, Jared Lyvers wrote:
I added the following to my incoming filter after going over the myDoom emails that we were getting at our agency.
body -case 'UEsDBAoAAA' drop body -case 'TVqQAAMAAA' drop
The emails all had an attachment that was the virus. because the virus was always the same, only the name being diff. The above were always in the headers of the attached files.
I usually don't like to use the body tag due to the amount of email that
we get and the server that I have at my disposal. However, I felt like
this was a good candidate for using this tag.
Hope that helps.
j
On Wed, 11 Feb 2004 00:03:30 -0600 Bhavesh Patel <[EMAIL PROTECTED]> wrote:
my main admin account got slammed with mydoom.
7800 fricking messages that are "delivery system failure"
my admin accounts gets all the mail that doesn't have a real address. for example, if you send something to [EMAIL PROTECTED], it will drop into the admin account. so now my doom is sending things with [EMAIL PROTECTED], then it is bouncing back to me and dropping into the main account.
what is the best way to manage this?
1) i added some filters to block the subject lines that are most popular 2) but, should I have my admin account configured differently?
right now, I have everything in my domain whitelisted. maybe the best thing to do is just go back and whitelist the specific email addresses that I actually use (15-20 max). but this just seems that it will get into a maintenance nightmare eventually.
3) what is the best way to edit the mail file to delete all the bullshit messages?
thanks,
bhavesh
_____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
--
Do or do not, there is no try. --Yoda
onClipEvent (enterFrame){ if (emailsent==0){ _root.sig = " // Jared Lyvers // --------------------------- // Director of Interactive // Director of IT // LPI Certified // --------------------------- // www.lewiscommunications.com // 205 . 980 . 0774 // R T F M " } }
_____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
