Dennis Peterson wrote: > Joe Sloan wrote: >> Perhaps our sample size is too small, but it certainly seems that this >> whole overhyped idea of viruses apart from ms windows is a non-issue in >> practice.
> How are able to determine that? There's nothing in the connection > information or in the message that identifies the source OS, hardware, > or MTA. Everything in a message can be spoofed as can the sending > system. The only thing you can be sure of is the IP you log during the > connection. Nothing else can be considered real. It's rather simple. Every single one of the viruses we looked at has been a windows executable, therefore could not have possibly infected a non windows platform. Joe _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html