On Thursday, August 21, 2003, 7:52:46 AM, Peter MacGregor commented:

PM> Those of us on stand-alones and who are self-employed in our wind-swept 
PM> garrets have to deal with it ourselves and try and meet deadlines for that 
PM> world-beating project that will make us rich enough to employ an IT Manager 
PM> to keep this rubbish at bay for us! (grin)!

Peter, I'm seeing it too, but I haven't seen a single one
actually make it as far as my email program.  Mail via my
website accounts is blocked entirely with a procmail recipe
that stops any email with suspect attachments - so Sobig.F
never stood a chance.  I run Mailwasher before downloading
email and it also has correctly tagged every instance of
Sobig as either spam or a virus - it's a quick glance and
then I delete them all.

What has actually been a bigger problem for me is the bounce
messages. I checked the logs of what was being blocked on my
server yesterday and there were about 20 messages in 20
minutes, with 19 of them being bounce messages. So, the
bigger part of the problem isn't the virus itself, but
servers that bounce it back, many of which send back the
attachment. So the autoresponders and bounce messages
actually are spreading the virus at least 10x-20x faster
than the virus is spreading itself, since the "from" address
receiving the bounce is never the originator of the message.

Anyway, I think a big part of the problem would be dealt
with if the ISPs and networks would simply TRASH email found
to have a virus rather than sending it to the address in the
"From" field.  Nothing gets past Mailwasher, but many of
the bounce messages do get past my procmail filter - it
depends on whether they return the attachment or a message
with full headers (blocked), or just a notification (not
blocked).

-Abigail


____ � The WDVL Discussion List from WDVL.COM � ____
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] 
       Send Your Posts To: [EMAIL PROTECTED]
To set a personal password send an email to [EMAIL PROTECTED] with the words: "set 
WDVLTALK pw=yourpassword" in the body of the email.
To change subscription settings to the wdvltalk digest version:
    http://wdvl.internet.com/WDVL/Forum/#sub

________________  http://www.wdvl.com  _______________________

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to