Re: virus' on the list
On Wed, Aug 27, 2003 at 12:20:55AM -0400, amg wrote:
> Hello all,
>
> Being relatively new to the whole mailing-list scene I have a question
> about the linux mailing-list scene actually (actually part of a mailing
> list in my windows days).
Welcome ;-)
> While browsing my inbox, which I only do every several days, I notice
> messages from places such as "info@winram.com" (this was recently, I
> received (or it was sent?) it: 03.08.28).
>
> I am wondering what this is. Did someone send a virus/worm/whatever to
> debian-user@lists.debian.org? Is info@winram a security company
> protecting us happy debian users from such a horrible thing? Is this a
> common thing (have seen before, but can't remember where/when)? Did
> "info@winram.com" mistakingly judge a "normal/safe" message as a threat
> to our security, and in the end, choose to inform us about the potential
> threat?
We do not have a security company protecting us. As a few people have
pointed out already, this is probably a case of a virus being sent with
a faked From header, and over-zealous anti-virus software.
I have added a lot of anti-virus messages to the blacklist, and I'm still
adding more, as more messages make it through. While there have been a
number of messages getting through, in the month of August, 1304 messages
didn't make it through, as they were judged to be either a virus, or an
anti-virus message. By contrast, July only had 2 such messages.
<snip>
> afterthought: while on the windows mailing-list, I never received
> anything closely related to a "virus warning", which is why I ask the
> question now, instead of my pre-Linux days.
Having a virus which sends out a message with a fake From header, is a
relatively recent thing.
Pasc (with his listmaster hat on)
--
Pascal Hakim 0411-283-060
"Do not bend."
Reply to: