[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OT: Re: Thanks!

On Sun, 2003-10-19 at 20:31, Bosse Klykken wrote:
> On Sat, Oct 18, 2003 at 01:13:47AM +0200, Bosse Klykken wrote:
> > (Now I have tagged my email adress with an identifyer so that I can see
> > how much spam that will be generated out of this particular posting.)
> Gerald Livingston is right, after posting my previous message, from
> the period of Sat, 18 Oct 2003 02:30:22 +0200 (CEST) to the period of
> Sun, 19 Oct 2003 14:03:48 +0200 (CEST) I have received 130 swen virus
> messages tagged with the previously unused +debfw address. The senders
> sending MTA country of origin varied from USA, Japan, Finland,
> Malaysia, Australia, Italy and several others.
> All of this might be due to the fact that Swen also replicates via
> newsgroups[1], and that this list is being synced as the newsgroup
> linux.debian.maint.firewall[2]. The infected user might not even
> subscribe to this group.
> .../Bosse
> [1] http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
> [2] http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=off&group=linux.debian.maint.firewall
> -- 
> Bosse Klykken - http://www.klykken.com/~bosse - PGP: 0x570ABB4E
> ICQ: 3541816 - We learn from history that we don't learn from history

That's how they work.
I get that many overnight redirected through the spamassassin/razor
filter, off one list.
But if there weren't so many people around that don't know how to secure
their boxes, the incidence would be minimal at best.


Reply to: