Re: Getting rid of worms and viruses

[Ross Boylan <RossBoylan@stanfordalumni.org>]

On Wed, Sep 24, 2003 at 04:30:13AM -0500, Ron Johnson wrote:
> Read the thread "MS Mail Bombs" that started a few days ago, 
> particularly:
> http://lists.debian.org/debian-user/2003/debian-user-200309/msg03898.html

Thanks.  I searched for spam, virus, and a few other things, but not
"bomb" or "MS"!

That thread and the other responses here were very helpful.  I'm still
curious if the spam/virus distinction has much significance anymore.
I also wonder how the different systems are at updating to new
threats.  Broadly, I know there are three patterns:

1) You have to manually tweak it.
2) You train it by identifying spam (Bayesian filters).
3) Somebody else updates it, and you get the updates either
automatically (black-hole lists) or by updating the software.

Any comments on where the different solutions fit on this dimension?