[66830] in North American Network Operators' Group
Re: in case nobody else noticed it, there was a mail worm released
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Jan 26 20:58:55 2004
Date: Tue, 27 Jan 2004 07:28:15 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
Cc: nanog@merit.edu
In-Reply-To: <20040127015211.9BDFD14C4F@sa.vix.com>
Errors-To: owner-nanog-outgoing@merit.edu
Paul Vixie [1/27/2004 7:22 AM] :
> my copies (500 or so, before i filtered) are in a ~7MB gzip'd mailbox file
> called http://sa.vix.com/~vixie/mailworm.mbox.gz (plz don't fetch that unless
> you need it for comparison or analysis). there's a high degree of splay in
> the smtp/tcp peer address, and the sender is prepared to try backup MX's if
> the primary rejects it, though it appears to try the MX's in priority order.
MyDoom / Novarg etc
http://news.com.com/2100-7349_3-5147605.html?tag=nefd_top
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations
