If I where you and the infected machine connected directly to your mailserver I would create a BAN in Imail for this ip to prevent it to even connect and send anything to your server.
/ Eje Monday, September 8, 2003, 5:28:14 AM, you wrote: JP> I have sort of resigned myself to just continue deleting them as they come JP> in. JP> Hopefully they will actually stop on the 20th. JP> jp JP> ----- Original Message ----- JP> From: "Hermann Strassner" <[EMAIL PROTECTED]> JP> To: <[EMAIL PROTECTED]> JP> Sent: Monday, September 08, 2003 3:59 AM JP> Subject: RE: [Declude.Virus] SoBig more prolific now? >> > were sent to a single address on my domain at the rate of about 1 per >> > minute. Does anyone know how fast it sends? Does it have anything to >> > do with the speed of the infected computer? I'm just curious. >> >> I think it depends on the speed of the internet connection, and if it is >> fast enough, from the speed of the PC. >> >> Hermann >> >> --- >> [This E-mail was scanned for viruses by Declude Virus JP> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". The archives can be found >> at http://www.mail-archive.com. >> --- >> [This E-mail scanned for viruses by Declude Virus] >> >> JP> --- JP> [This E-mail scanned for viruses by Declude Virus] JP> --- JP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JP> --- JP> This E-mail came from the Declude.Virus mailing list. To JP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JP> type "unsubscribe Declude.Virus". The archives can be found JP> at http://www.mail-archive.com. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network eFax : 240-376-7272 Phone : 620-231-7777 Fax : 620-231-4066 Online Store http://www.fament.com/catalog/ - Your Full Time Professionals - -- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
