[60957] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: To send or not to send 'virus in email' notifications?

daemon@ATHENA.MIT.EDU (Leo Bicknell)
Wed Aug 20 13:23:03 2003

Date: Wed, 20 Aug 2003 13:16:30 -0400
From: Leo Bicknell <bicknell@ufp.org>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <20030820100405.A26597@sthomas.net> <20030820164644.GA12353@ussenterprise.ufp.org>
Errors-To: owner-nanog-outgoing@merit.edu



--2fHTh5uZTiUOsy+g
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


FWIW

In a message written on Wed, Aug 20, 2003 at 10:04:05AM -0700, Steve Thomas=
 wrote:
> From: Steve Thomas <nanog@sthomas.net>
> To: Leo Bicknell <bicknell@ufp.org>
> Subject: Re: To send or not to send 'virus in email' notifications?
[other headers editied]
> NO! Some organizations (the company I work for, for instance) use MailSca=
nner on incoming AND outgoing mail. I tried telling this to the person who =
sent the Postfix regex, but, of course, my mail was rejected.
>=20
> MailScanner is a very widely used product, and adding rules/filters like =
the one above only adds to the problems that the virus author is trying to =
create. Please forward this to NANOG - I tried subscribing to NANOG-POST, b=
ut my subscription request was bounced with "content rejected".

Note, unlike the postfix rule his message still made it past
spamassassin has he had enough "non-spam" qualities to offset the
rule I suggested adding.

Please keep in mind there may be legitimate e-mail with these headers
if you're going to use rules such have been suggested here.

--=20
       Leo Bicknell - bicknell@ufp.org - CCIE 3440
	PGP keys at http://www.ufp.org/~bicknell/
Read TMBG List - tmbg-list-request@tmbg.org, www.tmbg.org

--2fHTh5uZTiUOsy+g
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE/Q6zuNh6mMG5yMTYRAnOYAJoDHg3GlPyaZ+vJEPRBDNCJChw5mQCfcoUW
amOxTxwaXcCTQurbYxSlW4k=
=et8i
-----END PGP SIGNATURE-----

--2fHTh5uZTiUOsy+g--

home help back first fref pref prev next nref lref last post