OT -- Re: Being bombarded by e-mail trojans

From: Pete Turnbull <pete_at_dunnington.u-net.com>
Date: Fri Sep 19 15:50:00 2003

On Sep 19, 9:00, Glen Goodwin wrote:

> I'm getting a couple of dozen every day on our AOL account, as well
as a
> ton of "returned mail" notices regarding mail *I* never sent . . .
either
> it's an attempted attack or someone is spoofing our AOL address.

That's because the Sobig-F virus spoofs sender addresses. People who
have your email address somewhere on their Windows machine (not
necessarily in their address book, either!) and have the virus, will
unwittingly be sending our copies of the virus that claim to be from
you --and many ISPs and filter programs don't check the headers
properly.

> > Is there any quick filter I can add to sendmail to thwart their
delivery?
> > This is becoming highly annoying.

> Don't know about that, but I just received a notice from CERT
regarding a
> buffer overflow bug in sendmail, so best beware . . .

That won't affect spam, particularly. The patch has been out for a few
days, actually, and our systems were patched a while ago :-)

-- 
Pete						Peter Turnbull
						Network Manager
						University of York
Received on Fri Sep 19 2003 - 15:50:00 BST

This archive was generated by hypermail 2.3.0 : Fri Oct 10 2014 - 23:36:26 BST