On Sun, 2003-10-19 at 20:31, Bosse Klykken wrote:
On Sat, Oct 18, 2003 at 01:13:47AM +0200, Bosse Klykken wrote:
> (Now I have tagged my email adress with an identifyer so that I can see
> how much spam that will be generated out of this particular posting.)
Gerald Livingston is right, after posting my previous message, from
the period of Sat, 18 Oct 2003 02:30:22 +0200 (CEST) to the period of
Sun, 19 Oct 2003 14:03:48 +0200 (CEST) I have received 130 swen virus
messages tagged with the previously unused +debfw address. The senders
sending MTA country of origin varied from USA, Japan, Finland,
Malaysia, Australia, Italy and several others.
All of this might be due to the fact that Swen also replicates via
newsgroups[1], and that this list is being synced as the newsgroup
linux.debian.maint.firewall[2]. The infected user might not even
subscribe to this group.
.../Bosse
[1] http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html
[2] http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=off&group=linux.debian.maint.firewall
--
Bosse Klykken - http://www.klykken.com/~bosse - PGP: 0x570ABB4E
ICQ: 3541816 - We learn from history that we don't learn from history
Yep,
That's how they work.
I get that many overnight redirected through the spamassassin/razor
filter, off one list.
But if there weren't so many people around that don't know how to secure
their boxes, the incidence would be minimal at best.
Regards,
David.
--
To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org